• SOFTWARE DEVELOPMENT 




The Industry Newspaper for Software Development Managers 



ISSUE NO. 098 

Reasoning Moves Into 

Application 

Security Market 5 

Intel Follows AMD's 

64-Bit Lead 5 

JetBrains Overhauls 

IntelliJ IDEA 6 

WS-Security Support, 

Better Integration 

New to OptimalJ 8 

MagicDraw UML Tool 

Beefs Up Reports 8 

Q-Link Creates Dynamic 
XForms Components 10 

Kinzan Launches 

Eclipse-Based, 

Graphical IDE 11 

Attachmate Seeks 

End to Middleware 12 

WS-Discovery 

Specification Published 13 

PolarLake Looks To 

Automate Business Tasks . .13 

Pocket PowerBuilder 1.5.1 
Optimized for XScale 17 

iAnywhere Integrates 

AvantGo Sync Tool 

With SQL 17 

Wind River Partners On 

Red Hat Embedded Linux . .18 

SPECIAL REPORT 



Content Management Systems 

Are Being Revamped 

For Project Management . . .21 

A BZ MEDIA PUBLICATION $7.95 

www.sdtimes.com 



BRINGING WEB SERVICES 
DOWN TO MOBILE JAVA 

Sun adds XML r SOAP to J2ME 
HotSpot r wireless developer tools 



BY EDWARD J. CORREIA 

With the releases in February 
of new versions of its HotSpot 
JVM and Java Wireless Toolkit, 
and the launch of the Java 
Verified application 
certification program, 
Sun Microsystems 
Inc. claims to bring 
Web services to J2ME 
and to accelerate not 
only Java applications 
themselves, but also 
the process of verify- 
ing compatibility with 
devices and carrier 
networks. 

"We've been work- 




A unified app testing 
service is now in 
place, says Sun's Kay. 



ing hard to ensure that start-up 
time and overall execution time 
are increasing," said Sun CTO of 
mobility David Rivas of the 
new JVM, which he claimed 
operates as much as 
eight times faster 
than Sun's previous 
implementation. 

HotSpot also now 
integrates Java Tech- 
nology for the Wire- 
less Industry (JSR 
185) and J2ME Web 
Services Specifica- 
tion (JSR 172), which 
he said not only 
► continued on page 18 



J Boss Goes 



Corporate 
For Credibility 

New funding gives open-source 
supplier a solid base for growth 



BY DAVID RUBINSTEIN 

A US$10 million infusion of 
investment capital last month 
will help JBoss Group LLC 
become JBoss Inc., a "next-gen- 
eration open-source company" 
that seeks to grow its 
community of devel- 
opers while it releas- 
es products it can 
profit from, accord- 
ing to founder and 
chief executive offi- 
cer Marc Fleury. 

In an exclusive 
interview with SD 
Times, Fleury said 
the round of funding, 
led by former Sil- 
verStream founder 
David Skok's Matrix 
Ventures, will enable 
JBoss to make financial offers to 
programmers within the com- 
munity. Skok has been named to 
the board of directors, and Bob 




Free software, paid 
support is JBoss' plan, 
according to Fleury. 



Bickel, former general manager 
of Hewlett-Packard's middle- 
ware division, has been brought 
in as vice president of strategy 
and corporate development. 
Fleury said open-source com- 
panies first need to 
prove they are finan- 
cially viable and 
technically reliable. 
He explained that 
JBoss now offers its 
customers around- 
the-clock support 
and product in- 
demnification. Also, 
the company has 
created a J2EE 
Founders Program 
under which par- 
ticipants such as 
Borland, Iona, Sonic 
Software and Web Methods will 
work with JBoss to gain certifi- 
cation for its products from Sun 
► continued on page 18 



From Cost Centers to Revenue Streams 

Enterprises are using third-party Web sites to boost sales 



BY EDWARD J. CORREIA 

eBay.com Inc. in late February 
added SOAP and Java to its 
Web services SDK, tools that 
developers can use to integrate 
their back-end systems with the 
popular online auction site. The 
company also has teamed with 
Microsoft Corp. to adapt Office 
System 2003 to better suit an 
emerging class of enterprise 
developers leveraging estab- 
lished Web sites to build sales. 

Debbie Brackeen, director of 
the eBay developers program, 
said that the auction site once 
thought of mainly for antiques, 
collectibles and curiosities is now 



also an alternate sales channel 
for such companies as Disney, 
General Electric and Sears. 
"Like the majority of our eBay 
developers, Sears is focused on 
the end-to-end solution, starting 
from listing the items for sale all 
the way to end-of-auction inven- 
tory management and fulfill- 
ment issues," she said. 



Though the developer pro- 
gram has been in existence for 
about three years, Brackeen 
said it has only recently started 
to pick up steam. "We've grown 
from 200 developers last year to 
about 4,000 now," she said, 
adding that the recent en- 
hancements to its SDK were in 
► continued on page 14 



SERENA TO ACQUIRE MERANT 



BY DAVID RUBINSTEIN 

The board of directors of U.K. - 
based Merant Inc. earlier this 
month agreed to accept an offer 
of approximately US$380 mil- 
lion to be taken over by Serena 
Software Inc. This marks the 
second major acquisition in the 
past 12 months for Serena, 
which last June closed its pur- 
chase of TeamShare Inc. 

The acquisition creates "a 
very powerful force in the enter- 



prise change management and 
application life-cycle manage- 
ment space," said Serena presi- 
dent and CEO Mark Woodward 
on a conference call announcing 
the deal. 

Serena has offered to pay 195 
pence per share, which re- 
presents a 25 percent premium 
over Merant s stock on March 1, 
according to a company an- 
nouncement. Shareholders must 
still approve the deal. I 



BETA TESTERS 
WEIGH IN 
ON WHIDBEY' 

Microsoft to unveil 
more of plan in May 

BY JENNIFER DEJONG 

Changes to the upcoming 
"Whidbey" version of Visual 
Studio .NET, which Microsoft 
Corp. will preview at the Tech- 
Ed 2004 conference in San 
Diego in May, are expected 
to continue to ease the process 
of building complex Web 
applications and facilitate com- 
munication among application 
development and deployment 
team members. 

Beta testers, working with a 
version of Whidbey that Micro- 
soft previewed at its Profes- 
sional Developers Conference 
last October, offered some 
firsthand accounts of what it 
looks like so far. 

► continued on page 15 
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Into the (Security) Breach 



Reasoning moves into application security 
market with hosted code analysis service 



TREND, REGRESSION ANALYSIS NEW 
TO SANCTUM'S APPSCAN TOOLS 



BY DAVID RUBINSTEIN 

Extending its software analysis 
software into the security mar- 
ket, Reasoning Inc. on March 8 
was to launch a new code inspec- 
tion service designed to focus on 
application vulnerabilities. 

The Reasoning Security 
Inspection Service, according 
to CEO William Payne, was 
created to help companies find 
security vulnerabilities at the 
application level — the "root 
cause" vulnerabilities, he said. 

The service targets four key 
areas that Payne claimed 
account for two-thirds of all 
application weaknesses: buffer 
overflows, where inputs are not 
checked for size; tainted data, 
which could hold unanticipated 
formats or executables; security 



race conditions, which the com- 
pany calls the time between 
verification of an operation and 
its execution that can allow an 
attacker to get in; and risky 
operations, such as weak ran- 
dom number generation or 
poor temporary file names. 

The Reasoning service uses 
static code analysis methods to 
verify each line of code in an 
application, Payne explained. 
Reasoning uses secure code- 
collection tools to gather in the 
code from the companies using 
the service, then runs the code 
through a processing engine 
that creates inspection points in 
the code for analysis, he said. 

Reasoning then does a manu- 
al review of these findings, and 
within 10 days the company gets 



GROWTH OF SECURITY INCIDENTS 
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back a report on vulnerabilities 
that "is 100 percent true," Payne 
claimed. "By automating the 
process [of analysis] and under- 
standing what's coming out of 
the machines, we can almost 
immediately tell if a line of code 
is good or bad," Payne said. 

Reasoning believes its static 
analysis approach to application 
security differs from the offering 
of Sanctum Inc., whose AppScan 
tool is a dynamic unit testing 
tool, which requires the applica- 
tion be complete and running. 
Payne, though, stressed the 
importance of protecting appli- 
cation code against malicious 
and inadvertent breaches and 
advised that companies should 
use multiple methods to ensure 
their application and IT environ- 
ments remain secure. 

One potential advantage to 
users, according to director of 
marketing Tom Fry, is that there 
is no software to install and learn 
and no test cases to create. 

Fry said more errors can be 
caught at the code level than can 
be caught doing tests on running 
code at the operational level. 

The service is billed on a 
per-line charge that had yet to 
be established at press time, 
although Fry indicated it would 
be slightly higher than the 20 
cents per line charged for the 
company's current services. I 



The ability to do trend and 
regression analysis to track 
progress in the fight against 
security holes in running appli- 
cations highlights the new fea- 
tures Sanctum Inc. has built 
into version 4.5 of its AppScan 
QA software testing and Audit 
compliance editions. 

In the previous version, 
4.0, the only comparisons 
AppScan QA and Audit users 
could do were delta analyses, 
which allowed them to com- 
pare the results of one test 
with another. By including 
XML support and XSLT tem- 
plates in version 4.5, AppScan 
now enables users to take the 
XML data that comes out of 
delta analysis and transform it 
to look for trends that show 
up in all tests from day one, as 
well as to compare all tests 
against a baseline. "Regres- 
sion and trend analysis are 
fundamental to QA," said 
Steve Orrin, Sanctum's chief 
technology officer. 

The design goals for version 
4.5 were to facilitate communi- 
cation among QA, developers 
and business analysts, and to 
help corporations deal with 
regulatory and corporate com- 
pliance issues. The XML output 
gives users a standard way to 
interact with third-party analy- 
sis and reporting systems. 



Sanctum's QA and Audit 
tools test the finished build of 
an application, unlike competi- 
tors' tools that do static analy- 
sis of working code. "It's 
important to test the applica- 
tion when it's up and running, 
because defects can appear in 
the seams" created by middle- 
ware or Web services, he said. 
"Also, we test for vulnerabili- 
ties in the infrastructure." 

As for those code compa- 
nies that have done static 
analysis of code for functional- 
ity, Orrin said, "it makes sense 
for them to reposition what 
they've been doing for guality 
into security as well." 

AppScan QA 4.5 now has 
the ability to recommend fixes 
when problems are detected in 
the applications, Orrin said. 
The user also can determine 
which defects are to be dis- 
played in the tool or included in 
a report, he added. 

New in the Audit edition are 
built-in templates for many of 
the regulations companies now 
must comply with, as well as 
customized templates for cor- 
porations to establish their 
own security regulations that 
the tool can test against. 

A single license for the App- 
Scan QA and Audit 4.5 tools is 
US$15,000 each for one year. 
— David Rubinstein 



Intel Follows AMD's 64-Bit Lead 



BY ANDREW BINSTOCK 

SAN FRANCISCO — At the 
Intel Developer Forum, held 
here in mid-February, the world's 
largest chipmaker announced 
upcoming 64-bit extensions to its 
line of x86 processors. 

Specifically, Intel Corp. CEO 
Craig Barrett promised that the 
32-bit architecture with new 64- 
bit extensions (termed IA-32e to 
distinguish it from the all-32-bit 
architecture, IA-32, used in the 
current chips) will ship in the 
Xeon family of workstation and 
server processors during the 
second quarter of this year. 

According to Peter Glaskow- 
sky, editor-in-chief of Micro- 
processor Report, most of the 
circuitry for the 64-bit capabili- 



ties exists — but is disabled — in 
Intel's currently shipping "Pres- 
cott" generation of the Pen- 
tium 4 chips. 

"They'll be using that circuit- 
ry in the Xeon DP [for dual pro- 
cessing systems] processors, and 
[will] release similar technology 
in the Xeon server chips within 
the same time frame. If Intel fol- 
lows its normal path, the tech- 
nology will show up in Pentium 
processors sometime next year, 
and in the Celeron chips a year 
or so after that," he predicted. 

The 64-bit extensions — code- 
named "Yamhill" — were a tightly 
kept secret and the object of 
strenuous denials when rumors 
first leaked out about their exis- 
tence in early 2002. The an- 



the 



nouncement at IDF ended 
months of speculation as to how 
Intel would respond to the grow- 
ing adoption of arch- 
rival Advanced Micro 
Devices Inc.'s 64-bit 
extensions to x86. 

Spokesmen for 
AMD were clearly 
pleased by Intel's an- 
nouncement. AMD's 
Benjamin Williams, a 
director of the serv- 
er/workstation prod- Intel will ship the 
uct lines, was quoted 64-bit Xeon chip later 
in the San Jose Mer- this year, says Barrett. 
cury News as saying, 
"We welcome [Intel] to the 
AMD 64-bit world." 

Hewlett-Packard Co., which 
offers product lines using chips 



from Intel and AMD, clarified its 
positioning. Brian Cox, the prod- 
uct line manager for HP's server 
division, said, "On the desktop, 
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ppmg 




AMD chips are 
in our PCs. Xeon processors 
with the new extensions will be 
shipping in our work- 
station lines." 

Likewise, in a news 
release, IBM Corp. 
indicated several of its 
xSeries systems will 
run on the new Intel 
technology. IBM al- 
ready offers servers 
using AMD's Opteron 
processor. 

Because Intel's new 
instructions are bina- 
ry-compatible with 
extensions, software 
under development for the 
AMD64 architecture will work 
on the Intel processors. 



AMD's 



Microsoft's Web site promises 
that Windows XP 64-Bit Edition 
for 64-Bit Extended Systems and 
Windows Server 2003 for 64-Bit 
Extended Systems will run on 
both architectures. These operat- 
ing systems are in beta test and 
Microsoft has stated its expecta- 
tion to release final versions in 
the second half of this year. Also, 
Novell Inc. and Red Hat Inc. 
stated their intention to support 
the chip in the second quarter. 

According to Glaskowsky, 
"Intel lucked out here. Normal- 
ly, architectural changes of this 
order cause a one-year delay 
before software is available that 
can exploit the new features 
effectively. But because soft- 
ware vendors had ramped up 
for AMD64, Intel arrives with a 
whole crop of operating sys- 
tems and software ready to 
deploy on its chips." I 
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JetBrains Overhauls IntelliJ IDEA 

New GUI designer, improved JUnit testing among key revisions 



BY JENNIFER DEJONG 

Enhancing its popular Java 
IDE with more than a dozen 
new features, Prague, Czech 
Republic-based JetBrains Inc. 
last month released version 4.0 
of IntelliJ IDEA. 

The first major release since 
3.0 in November 2002, key 
changes in 4.0 include a new 
GUI designer; improved CVS 
source code management, code 
editing, debugging and JUnit 
testing capabilities; better inte- 
gration with BE A Web Logic 
Server; support for the new Java 
language feature generics; and 
the ability to more easily manage 
projects that share components 
with other projects. 

"We have rewritten critical 
parts of the application, im- 
proving integrations, adding 
new features and increasing 
usability," said Eugene Belyaev, 
president and chief technology 
officer of JetBrains. 

The GUI designer, absent 
from earlier versions of IntelliJ 
IDEA, takes a visual approach 
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Layout and binding options are shown in the new GUI designer. 



to laying out components on a 
page, he said. Because it sepa- 
rates the layout information 
from the business logic, devel- 
opers can change a layout sim- 
ply by repositioning the compo- 
nents, without having to rewrite 
from scratch or manage the 
underlying code, he said. 

In previous versions of IntelliJ 



IDEA, version-control capabili- 
ties were not fully integrated in 
the IDE, noted Belyaev. You had 
to install a separate CVS client 
and switch back and forth. "Now, 
with a single key press, you can 
see which files have been 
changed since the last synchro- 
nization," he said. 

In a similar fashion, prior to 



4.0, JUnit testing was cumber- 
some. JUnit ran outside the IDE 
and when a test failed, it simply 
notified the developer. By con- 
trast, 4.0 notifies the developer 
which tests are running, which 
ones succeeded and which 
failed. It then displays a two- 
pane window, noting the differ- 
ences between the actual and 
expected output, he explained. 

GENERICS-AWARE 

Version 4.0 also supports the 
new Java feature called generics, 
included in the forthcoming 
release of Java SDK 1.5. Gener- 
ics are classes and methods that 
work the same way on values of 
different types. "When the IDE 
makes changes to code, it is now 
generics-aware," said Belyaev. 

In addition to generic appli- 
cation server support, 4.0 auto- 
matically generates, supports 
and maintains BEA WebLogic 
Server specific files. "In the 
past, you had to hand-code 
server-specific descriptors," 
said Belyaev. Future versions of 



IntelliJ IDEA will support oth- 
er application servers, he said. 

J2EE projects are typically 
complex and may involve multi- 
ple internal dependencies, not- 
ed Belyav. To manage them 
more easily, 4.0 supports what 
JetBrains calls "modular pro- 
jects," where libraries and mod- 
ules — including Java, EJB, Web 
and J2EE application mod- 
ules — are shared among multi- 
ple projects. Instead of having 
to recompile an entire project, 
you recompile only those parts 
that have changed, he said. 

Also aimed at making Java 
developers more productive is a 
code-editing feature called 
intention actions and a debug- 
ging feature called HotSwap. In 
addition to on-the-fly code- 
checking and code suggestions, 
the intention actions feature 
looks for possible inconsisten- 
cies, explained Belyaev. 

The HotSwap debugger 
modifies code and allows the 
application to continue run- 
ning, he said. 

IntelliJ IDEA 4.0 costs 
US$499 per user license. 
Upgrade pricing is $299. For 
customers with 3.0 licenses 
purchased after Oct. 15, 2003, 
4.0 is available free of charge. I 
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Openwave Systems Inc. has acquired the assets of Nombas Inc., a 

provider of JavaScript and ECMAscript tools. Openwave will be adding 
the Nombas scripting tools to its own mobile browser and Phone Suite 
Framework. 

, PRODUCTS , 

The Apache Software Foundation has updated its Ant build software. 
Version 1.6.1 focuses on bug fixing and supports compiling with J2SE 
1.5. Apache also has released a first beta of Jakarta Slide version 2, a 
content repository. Slide now supports WebDAV and has stronger ver- 
sion control features . . . WRQ Inc. has updated its Verastream soft- 
ware, which is used to create 
Web services, portals and pack- 
aged applications for existing host systems. Version 5.5 now can inte- 
grate with Microsoft's BizTalk Server and Visual Studio .NET. It also can 
generate HTML from VT-style terminal interfaces . . . The latest ver- 
sion of Devrace's FIBPIus, a library of database components for Bor- 
land's IDEs, now can work with Borland's InterBase and the open- 
source Firebird databases within the same application. Version 5.2, 
which costs €235 per seat, also has an improved SQL generator and 
offers more data sorting functions . . . Diamelle Technologies Inc. is 
fi-^ offering version 2.0 of its E-Business Components, a set of 
1) J2EE components for e-commerce, CRM, content manage- 
ment and identity management. The updated components 
include applications for account and user management, order man- 
agement, catalog management and pricing. The components are 
enabled as Web services . . . Accelerated Technology, a division of 
Mentor Graphics Corp., has added a POSIX kernel to its Nucleus real- 
time embedded operating system. This allows applications written to 
use POSIX, a cross-platform API set commonly found in Unix, to port 
more easily to Nucleus. Pricing starts at US$7,495 . . . Wasabi Sys- 
tems Inc. has released a GNU Toolchain for Intel's XScale processors 
for NetBSD and Linux. The tools include a modified 
version of the gcc 3.3.1 C/C++ compiler with opti- 
mizations for those processors. The company also 
offers a version of NetBSD for XScale . . . New to developerWorks, IBM 
Corp.'s Web-based resource for developers, are eight Software Devel- 
opment Platform Evaluation Packs, which target different job roles, 
such as architects, IT managers and testers . . . Enea Embedded Tech- 
nology has updated its Polyhedra database for Linux, Unix, VxWorks 
and Windows, as well as Enea's own OSE embedded operating system. 
Version 5.0 now supports Unicode and allows schema migration. The 
software costs US$11,995 per developer seat . . . Sun Microsystems 
Inc. is preparing its second preview of Java Studio Creator, a simpli- 
fied IDE for JavaServer Pages and JavaServer Faces formerly referred 
to as "Project Rave." The first preview was offered to a group of about 
100 developers; the second preview will be a public early-access ver- 
sion . . . Corda Technologies Inc. is now offering Highwire, a way to 
generate Portable Document Format (PDF) files 
directly from HTML-formatted Web pages. The soft- 
ware is designed to accommodate page formatting, including table 
headers, image placement and page width issues, where simply "print- 
ing" a page to PDF doesn't work . . . Microsoft Corp. has started the 
public beta for its J# Browser Controls package, which lets develop- 
ers migrate Java applets to run within the .NET Framework. The forth- 
coming version 1.1 allows the browser controls to interact with HTML 
pages via script, and to work offline without a Web server connection. 
Microsoft also is offering an ASP.NET Resource Kit, a no-cost pack- 
age that includes the Web Matrix browser-based IDE, five prebuilt 
sample apps, and ASP.NET components from several vendors . . . Ver- 
sion 2.8 of Metrowerks' CodeWarrior Development Studio for Sym- 
bian OS will work with Symbian OS version 8.0, which was announced 
in February. The company says the update will be available "soon." 
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Kenton Sieckman has joined Wily Technology Inc. as VP of worldwide 
technical services. Previously, he was area vice president for North 
America at Oracle Corp. I 



WS-Security Support, Better 
Integration New to OptimalJ 

Tool also works with IBM mainframe applications 






BY JENNIFER DEJONG 

Detroit-based Com- 
puware Corp. last 
month announced the 
availability of version 
3.1 of OptimalJ, its 
development environ- 
ment that generates 
J2EE code from visual 
models. 

New to 3.1 is Web 
services security sup- 
port; better integration 
with other vendors' 
modeling tools and with 
IBM mainframe appli- 
cations; and testing sup- 
port for BE As Web- 
Logic Server, IBM's 
WebSphere Applica- 
tion Server, and open- 
source application ser- Once OptimalJ generates and compiles the code, devel- 
vers JBoss and Jonas. opers create database tables and run the application. 

There has always 
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been a security risk when uti- 
lizing Web services outside the 
firewall," said Compuware's 
Mike Sawicki, OptimalJ prod- 
uct manager. OptimalJ 3.1 
implements WS-Security, the 
Web services security specifi- 
cation defined by the Organi- 
zation for the Advancement of 
Structured Information Stan- 
dards (OASIS), an industry 
consortium. That means the 
Web services security plumb- 
ing is automatically generated 
for any Web service created 
in or accepted by OptimalJ, 



said Sawicki, saving the devel- 
oper from the labor-intensive, 
error-prone process of writing 
code to ensure Web services 
security. 

In addition to its own model- 
ing capabilities, which support 
seven of the nine diagrams 
specified by the Unified Model- 
ing Language, OptimalJ 3.1 
supports other modeling tools, 
including Borland's Together 
Control Center, IBM's Rational 
Rose, Objecteering Software's 
Objecteering/UML and Sparx 
Systems' Enterprise Archi- 



tect, said Sawicki. 

Supporting IBM's 
middleware technolo- 
gy, WebSphere MQ, 
means that Java devel- 
opers using OptimalJ 
3.1 can generate the 
code to invoke a main- 
frame application with- 
out having to master 
mainframe skill sets, 
noted Sawicki. 

The next version of 
OptimalJ, expected in 
June, will include the 
ability to automatically 
generate unit tests, 
said Compuware's vice 
president of strategy, 
Dan Schoenbaum. 

That's part of Com- 
puware's larger strategy 
to offer a development 
environment that en- 
compasses not only modeling 
and code generation, but also 
the application testing process, 
said Schoenbaum. "That will 
bridge cultural gaps in the 
development life cycle," he 
said. 

The developer edition of 
OptimalJ 3.1 provides code- 
editing features and costs 
US$800 per seat. The profes- 
sional edition, which adds 
UML tools, costs $5,000, and 
the architecture edition, which 
adds pattern creation capabili- 
ties, costs $10,000. I 



MAGICDRAW UML TOOL BEEFS UP REPORTS 



BY DAVID RUBINSTEIN 

A new reporting module with 
templates for software design 
documents and use case speci- 
fications is among the new fea- 
tures in version 7.5 of No 
Magic Inc.'s MagicDraw UML 
modeler, which will be 
released March 17, the com- 
pany announced. 

"You can put specifications 
into MagicDraw and can gen- 
erate it in [Rich Text Format] 
as it might appear in [IBM's 
Rational Unified Process] or 
PDF," said Saulius Kaukenas, 
MagicDraw product manager. 
"You end up with a document 
you can send to customers for 
approval." 

The tool works with the 



XML Metadata Interchange 
specification but does not yet 
support UML 2.0, which 
Kaukenas expects won't gain 
final approval under Object 
Management Group's adoption 
procedure until September. 

Also new is a free communi- 
ty edition aimed at open- 
source developers that in- 
cludes UML Class diagrams, 
Kaukenas said. The pricing 
remains unchanged. 

The personal edition, which 
allows users to draw, edit and 
publish models, costs US$149 
per seat. A standard edition, 
which adds a UML editor and 
reporting capability, costs $699 
for a floating license; the 
professional edition, in lan- 



guage-specific versions for 
Java, C + + and C#, adds some 
reverse-engineering capability 
and costs $1,299 for a floating 
license. An enterprise version, 
with code generation, reverse 
engineering and diagram- 
ming capabilities for CORBA 
IDL, EJB, WSDL and XML 
schema, costs $2,299 for a 
floating license. 

The company also released a 
native Windows version of the 
tool, replacing the previous Java 
version. Kaukenas explained 
that version 7.2 did allow for 
code generation from models to 
C#, and for the ability to create 
models from both C# source 
code and .NET Common Inter- 
mediate Language bytecode. I 
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Q-Link Creates Dynamic XForms Components 



BY DAVID RUBINSTEIN 

The newest version of Q-Link, a 
platform for assembling process- 
centric, component-based appli- 
cations from Q-Link Technolo- 
gies Inc., now offers XForms 
components. 

Support for the World Wide 
Web Consortium s XForms spec- 
ification, which defines the cre- 
ation of forms with greater capa- 
bilities than simpler HTML 
forms, was built into earlier ver- 
sion 5.0 released last May. 

The new release, version 5.2, 
expands on that by allowing de- 
velopers to define the behaviors 
and constraints of those forms by 
assembling the components in a 
drag-and-drop form design tool, 
while the components automati- 
cally generate the underlying 
XForms XML, according to 
Greg Wilson, founder and chief 
technology officer. The design 
tool also enables users to define 
different attributes and tie them 
directly to the property of the 
interface, he said. 

One of the key new features is 
the ability to add relevance to the 
forms, he said. Using the exam- 
ple of an insurance application, 



the interface for a policy applica- 
tion might give an applicant a 
box asking whether or not that 
person smokes or drinks. If the 
applicant answers yes, the box 
expands to ask how many per 
day. If the requirement to quali- 
fy for a certain rate changes, the 
interface can be updated dynam- 
ically, as the platform s workflow 



engine can now render XForms 
XML as dynamic HTML, he 
added. 

Aside from the workflow 
engine and interface builder, the 
Q-Link Platform consists of a 
persistence object framework 
and an integration framework. 
The platform is written as a Java 
application that sits above a 



J2EE infrastructure and pro- 
vides tools for the creation of 
custom business rules and work- 
flow components. 

Q-Link 5.2's new workflow 
engine features include the 
ability to create synchronous 
or asynchronous transactional 
branches, or to roll back a specif- 
ic branch, Wilson said. He said 



the company also has added new 
Q-PACs (Process Action Com- 
ponents) for the workflow. 

The software costs US$50,000 
per server processor for unlim- 
ited users and applications. A 
developer edition costs $25,000 
for unlimited users, but sup- 
port is limited to five named 
developers. I 



Flashline's FlashPack Manages Outsourcing 



BY DAVID RUBINSTEIN 

While the need to manage soft- 
ware assets created within an 
organization is important, that 
need might be even greater if 
assets are created by outside 
consultants or service providers. 
That's the driver behind Flash- 
line Inc.'s new FlashPack for 
Outsourcing, a plug-in extension 
for the Flashline Registry, an 
asset management system. 

"There's a rigorous workflow 
built in," said Flashline CEO 
Charles Stack. "Statement of 
Work and Request for Propos- 
als are two key asset types built 
into the FlashPack." 

The new FlashPack, the sixth 



from the company, helps organi- 
zations keep track of purchases 
of outsourced assets, and can be 
used to set up a process and cre- 
ate an audit trail for asset acqui- 
sition that includes defining 
what work is to be done, in what 
time frame and at what cost or 
gain, Stack explained. 

"Outsourcing is not a 
panacea," Stack said. "You can't 
forgo project management and 
requirements gathering." The 
FlashPack, which sells for 
US$50,000, includes templates 
for Request for Proposals and 
Statement of Work. Once those 
are agreed upon, the Flashline 
Registry can be used to ensure 



that the work complies with the 
requirements of the job and the 
work statement. 

A registration process built 
into the FlashPack allows com- 
panies to better monitor and 
approve asset acquisitions, pre- 
venting work from being out- 
sourced more than once for 
similar projects in different 
departments, for example. When 
outsourced projects return assets 
that can be reused in other pro- 
jects, the value of that outsourc- 
ing effort grows, Stack said. 

Flashline's other FlashPacks 
are for Java and .NET compo- 
nent-based development, open 
source, the federal enterprise 



architecture and Web services. 
Stack hinted that the next Flash- 
Pack in the works will deal with 
the reuse of legacy assets under 
the Reusable Asset Specification 
being finalized at Object Man- 
agement Group. "We're just 
waiting for the RAS piece to get a 
little further along," he said. The 
Architecture-Driven Moderniza- 
tion task force at OMG defines 
legacy systems as "any produc- 
tion-enabled system regardless of 
language or platform." 

Stack said Flashline is in- 
volved with the group's efforts to 
capture data and business logic 
from those systems, starting with 
providing a common view of all 
applications within an organiza- 
tion and allowing information 
about the assets to be shared. I 
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Kinzan Launches Eclipse-Based, Graphical IDE 



BY JENNIFER DEJONG 

Refocusing its business strategy, 
Kinzan Inc. earlier this month 
was expected to announce Stu- 
dio & Server 4.0, a collection of 
plug-ins for Eclipse. 

By combining Kinzan's earli- 
er Adaptive Web Services Suite 
with the open-source frame- 
work, Studio & Server lets Java 
developers assemble enterprise 
applications by dragging and 
dropping components, such as 
Web services, without writing 
code, said Kinzan's marketing 
director, James O'Leonard. 

Studio & Server is similar to 
J2EE-based IDEs such as Bor- 
land's JBuilder and IBM's Web- 
Sphere Studio Application 
Developer (WSAD) in that it 
uses Enterprise JavaBeans or 
Java classes at the model layer, 
HTML and JavaServer Pages 
at the view layer, and servlets at 
the controller layer, said 
O'Leonard. 

But instead of relying on a 
single controller to define the 
flow and functionality of the 
application, Studio & Server 
uses individual controllers for 




Each component in Studio & Server has an individual controller. 



each component in the applica- 
tion, said O'Leonard. 

That makes it easy for devel- 
opers to alter applications with- 
out having to delve into the 
code. "In a traditional J2EE 
application, you have to go into 
four or five files, find each 
piece of functionality and 
delete it," he said. But in Kin- 
zan Studio, the developer sim- 
ply reconfigures — assembling 
or disassembling — graphical 



representations of components. 

Instead of managing the 
linkages between each layer 
directly in the code, Kinzan's 
architecture forces components 
to expose bindings that can be 
visually wired to other compo- 
nents, O'Leonard explained. 

The technology behind Stu- 
dio & Server originates from 
Kinzan's earlier days as an appli- 
cation service provider. Founded 
in 1998, the company targeted 



firms such as cosmetic manufac- 
turer Avon Products Inc., which 
needed a simple way to create 
and host e-commerce sites tai- 
lored to the needs of individual 
sales representatives and the 
customers they served. 

But as the market for appli- 
cation service providers began 
to plateau in November 2001, 
Carlsbad, Calif. -based Kinzan 
abandoned that business model 
and began selling Adaptive Web 
Service Suites, a product based 
on technology it developed for 
Avon and other customers. 

With its current offering, 
Studio & Server, the company 
is targeting not only enterprise 
developers, but also systems 
integrators that build applica- 
tions tailored to individual cus- 
tomers. Kinzan believes that by 
reusing components created for 
one application in others, both 
parties will gain efficiencies. 

The assembly approach pro- 
duces applications that are 
more flexible than those based 
on off-the-shelf products, said 
O'Leonard. "And it is less time- 
consuming and expensive than 



building an application from 
scratch," he said. 

While Studio & Server does 
not require users to write code, it 
does require knowledge of how 
to build software. "There is this 
vision of the business person cre- 
ating software, and it sounds 
interesting," said O'Leonard. 
"But it doesn't really work. You 
still have to understand the con- 
cepts behind building applica- 
tions," he said. 

Studio & Server enables de- 
velopment teams to compart- 
mentalize tasks, said O'Leonard. 
"Java developers create the data 
access piece, and then hand it 
off to less technical developers 
to do the UI." 

In addition to its Java offer- 
ing, Kinzan recently rolled out a 
beta version of Studio & Server 
for .NET, which it expects to 
launch early this summer. It 
will run as a plug-in to Visual 
Studio .NET, said O'Leonard. 

Kinzan Studio & Server 
comes bundled with Eclipse. 
Kinzan Studio costs US$995 per 
seat; Kinzan Server costs $7,995 
per microprocessor. I 
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Attachmate Seeks an End to Middleware 



myExtra integration connectors run directly on IBM mainframes 

BY EDWARD J. CORREIA Attachmate Corp. with the claims gives developers the According to Markus Nitsch- 

Who needs middleware when launch last month of myExtra option to deploy spot integrations ke, Attachmate s vice president of 

you've got mainframes? That's Smart Connector Mainframe right on the mainframe, eliminat- marketing, deployment of con- 

the question being asked by Edition 4.0.2, software that it ing the need for middleware. nectors in this manner offers sig- 
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Mainframe 
connectors 
are more reli- 
able, claims 
Attachmate's 
Nitschke. 



nificant feature and performance 
improvements. "Compared with 
having a connector running off 
the mainframe, we're talking 
about increases somewhere 
between a hundred- and a thou- 
sandfold, depending on machine 
size," he claimed. 

Nitschke claimed that run- 
ning connectors on the main- 
frame also leads to deeper, 
more reliable transactions. "You 
have much more control over 
the transaction system that is 
not available to you if you're off 
the mainframe. 
We can now do 
two-phase com- 
mits and con- 
nect directly to 
the data sources 
rather than just 
the screen layer 
or the transac- 
tion layer." 

An added 
benefit, Nitschke 
claimed, is main- 
frame data access 
without knowledge of mainframe 
query languages. "The user can 
access those data sources using 
SQL statements and turn flat file 
systems into SQL [databases] 
which can be used by any SQL 
programmer," he said. What's 
more, Nitschke said that one set 
of commands can be developed 
for accessing multiple disparate 
mainframes. "You can have fed- 
erated data systems which allow 
you to combine VSAM with 
Adabas in one SQL statement, 
for example." The software also 
supports IMS/DB and DB2 as 
well as native access to CICS and 
IMS/TM apps. 

The solution includes a Win- 
dows-hosted GUI development 
environment that Nitschke said 
generates all necessary files. 
"That gets uploaded to the main- 
frame, and that's it for the con- 
figuration." Therein lies the rub. 
"[Adding software to a main- 
frame] is considered by some as 
invasive, and some customers 
may not even own the main- 
frame but be getting those ser- 
vices from somewhere else" and 
are thus forced to use connectors 
that reside off the mainframe. 

Despite the version number, 
myExtra Smart Connector Main- 
frame Edition 4.0.2 is the compa- 
ny's first commercial deployment 
of the solution, which is available 
now. Pricing for the mainframe- 
resident edition for IBM 390 sys- 
tems starts at US$75,000. The 
$65,000 middleware edition runs 
on Unix and Windows servers 
and can access only screen and 
transaction layers. I 
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WS-Discovery Specification Published 



BY JENNIFER DEJONG 

WS-Discovery, a specification 
that defines how computers and 
devices such as cell phones and 
printers find and connect to Web 
services, was published by BEA 
Systems Inc., Canon Inc., Intel 
Corp. and Microsoft Corp. and 
released at the Intel Developer 
Forum last month. 

"WS-Discovery is a mecha- 
nism for an application or 
device to come alive on the net- 
work to declare the availability 
of services or a make a request 
for services," said Microsoft 
director of platform strategies 
Steven VanRoekel. 

WS-Discovery enables ad hoc 
connectivity among applications 

POLARLAKE LOOKS 
TO AUTOMATE 
BUSINESS TASKS 

BY JENNIFER DEJONG 

In an ongoing effort to help 
Java developers solve integration 
problems on a project-by-project 
basis, PolarLake Ltd. announced 
last month the availability of ver- 
sion 3.2 of its Integration Suite. 

Composed of Jintegrator, 
Database Integrator and Mes- 
saging Integrator, the Polar- 
Lake Integration Suite provides 
graphical tools and uses XML 
and Web services to make the 
connections essential to com- 
pleting a business task, such as 
processing an order placed 
online, said Ronan Bradley, 
CEO of the Dublin, Ireland- 
based company. 

Version 3.2 now supports 
non-XML data, has the ability 
to encrypt, decrypt and digitally 
sign documents or pieces of 
them, and includes debugging 
and testing features that alert 
developers to problems such as 
misconfigured components or 
incomplete tasks, said Bradley. 
Built-in test capabilities in 3.2 
allow developers to preview 
what a document transformed 
from one XML schema to 
another will look like, and make 
sure it will operate as intended, 
said Bradley. "As integration 
becomes more complex, testing 
and checking becomes more 
important." 

Version 3.2 is available free 
of charge to PolarLake Integra- 
tion Suite customers with active 
standard support contracts. An 
Integration Suite license costs 
US$6,000 per developer. I 



and devices when the location of 
the Web service is not known. 
For example, an application run- 
ning on a laptop in a conference 
room could make a request for a 
printer. A truck pulling into a 
warehouse — working in tandem 



with the WS- Security specifica- 
tion — could declare the contents 
of its containers to an inventory 
database, said VanRoekel. 

"In the past you had to know 
the end point of the Web ser- 
vice or ask for it through a sys- 



tem such as UDDI," said Van- 
Roekel. "Everyone said Web 
services were loosely coupled. 
But [until WS-Discovery], the 
way one Web service connected 
to another Web service wasn't 
loosely coupled at all." 



Later this year, the specifica- 
tion will be turned over to a 
standards body. Which one will 
manage WS-Discovery is still to 
be determined, said VanRoekel. 

The specification will be 
implemented in Microsoft's Web 
Services Enhancements for Mi- 
crosoft .NET toolkit sometime 
later this year, said VanRoekel. I 
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4 continued from page 1 

direct response to this growing 
community. "Developers were 
demanding SOAP and Java," 
which she said provides precon- 
figured and tested libraries. 
The tools had already support- 
ed XML and .NET. 

eBay and Microsoft early 
this month posted sample code 
on developer.eBay.com that 
glues Excel and Front Page 
components of Microsoft's 
Office System 2003 to eBay's 
SDK. Enhancements to Excel 
include an inventory staging 
component that enables manu- 
al or automated inventory input 
via XML import, bulk loading 
of listings with real-time pric- 
ing, and a persistent historical 
sales page for review and analy- 
sis of sales and invoices. An en- 
hanced version of Microsoft's 
Front Page Web design tool 
will permit display of multiple 
eBay listings, and has a WYSI- 
WYG editing tool and the abili- 
ty to sort, filter and group data. 

She said that enterprise 
solutions provider SAP this 
year plans to release an eBay 
integration plug-in. "This will 
allow their customers to easily 






flush obsolete or excess inven- 
tory to the eBay marketplace" 
through an automated process, 
she said. The tool should be 
released by June. 

OTHER CHANNELS 

eBay is not the only e-commerce 
site trying to attract enterprise 
sales. Amazon.com is 
another. Daryl Butch- I 
er, software architect 
with Thrift Books 
LLC, said, "With Ama- 
zon, if a book never 
sells we don't have to 
pay anything." 

eBay also has had 
its share of failed sell- 
ers, including Home eBay integrates with 
Depot and Motorola, back-end systems 
both of which pulled from end to end, 
the plug last year says Brackeen. 
when they learned 
high quantities of identical 
items keep prices too low. 

Absent that problem, Butch- 
er said, Thrift Books obtains 
used and surplus books of all 
sorts from various sources and 
lists them as a so-called Ama- 
zon Marketplace Seller, a group 
of third-party sellers that sell 
new and used items alongside 
Amazon's at lower prices. Using 
the Amazon Web Services 



SDK, Thrift's .NET back end 
has been completely integrated 
with Amazon, Butcher said. 
"An application sits on our serv- 
er and polls Amazon for new 
orders, which are imported into 
a database. At a certain level, a 
printout is generated with pick- 
ing lists and invoices." Butcher 
said the company 
sells about 1,000 
books per day. 

The ability to tap 
into Amazon's exten- 
sive catalog of items 
greatly simplifies data 
entry, Butcher said. 
"When we enter a 
book into our system, 
we just type the ISBN 
number and Amazon 
gives us the title, 
author and price of 
the book." The ser- 
vice also displays what other 
merchants are charging for 
used books in various condi- 
tions. "We wouldn't know what 
to charge if we didn't have 
Amazon telling us what every- 
one else was pricing at." 

Data flows from Amazon in 
the form of text files, which 
require the developer to build 
logic in order to parse. Accord- 
ing to Jeff Barr, Amazon's tech- 



< 



i. 



nical program manager, this 
may change over time. "We've 
given out the fundamentals and 
left room for developers to put 
their creativity on top. In the 
future, we'll have more struc- 
tured ways to do that." Never- 
theless, Barr said Amazon's 
Marketplace Sellers account 
for about 22 percent of the 
company's overall book sales. 

Perhaps even more interest- 
ing are Amazon Associates, the 
company's name for companies 
that sell merchandise from 
Amazon's catalog on their own 
Web sites through cross inte- 
gration via XML or SOAP APIs 
(www.amazon.com/webservices). 
"This is our virtual scenario. As 
people make purchases through 
your site, we ship the items and 
send you commissions. We've 
got over 900,000 associates 
doing this." 

Barr said which API to use is 
a matter of developer knowl- 
edge and preference. "SOAP is 
more formal and structured and 
appeals to people who grew up 
with strongly typed languages 
like Java and C+ + . The XML- 
over-HTTP, sometimes called 
REST, is more for the stringy 
scripting languages like Perl, 
Python and PHP." One of the 



advantages of REST, he said, is 
that no SOAP toolkit is 
required. "All you need to get 
started is to open a socket, do a 
raw HTTP get and read the 
results. Every programming 
environment can do that." 

INTEGRATION OUTSOURCING 

Outsourcing is also an option, 
and a handful of consultancies 
exist solely for the purpose of 
connecting companies with com- 
mercial sites. Services include 
postings of listings, inventory 
management and order process- 
ing and fulfillment. 

Among the largest is Atlanta- 
based Auctionworks Inc. "Last 
year we facilitated over a quarter 
of a billion [dollars of] goods 
sold to the eBay marketplace, 
and we launch about 2 million 
items on eBay every month," 
claimed Paul Lundy, the compa- 
ny's chief marketing officer. 

Auctionworks tools and ser- 
vices start at about US$15 per 
month for a self-activation pro- 
gram with a simple XML-based 
API, Web page templates and 
online help. On the high end, 
$5,000 to $10,000 buys back- 
end integration, training and 
custom templates. The company 
also adds a per- transaction fee. I 
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WHIDBEY 



< continued from page 1 

One feature that's helpful 
to Holly Preuss, technology 
director at New York-based 
cosmetics firm L'Oreal USA, is 
the way Whidbey automatical- 
ly tests how code will perform 
on different browsers. "It 
pops up and tells you this page 
isn't compatible with a certain 
version of Netscape," she said. 
With earlier versions of 
VS.NET, she and her team 
of 17 developers, who are 
building an e-commerce appli- 
cation for the company's Shu 
Uemura brand, had no way 
of knowing this until QA 
spotted the problem. "Now 
we're correcting ahead of 
time," she said. 

Of interest to C# develop- 
ers is a Whidbey feature called 
generics, said Billy Hollis, 
president of Elysian Consult- 
ing, in Nashville, Tenn., and 
Microsoft Developer Network 
regional director for that city. 
"This advanced object-orient- 
ed capability, currently lacking 
in .NET languages, makes it 
easier for developers to manip- 
ulate collections of data 
objects," he said. 

Visual Basic .NET develop- 
ers will welcome in Whidbey 
the return of the VB 6 edit and 
continue feature, said Hollis, 
which lets developers fix bugs 
and continue testing without 
rebooting. 

According to Hollis, Whid- 
bey's "click once" technology 
for distributing .NET applica- 
tions across a company net- 
work or the Internet is essen- 
tial to the success of Web 
applications that rely on smart 
clients, not just browsers, to 
present information to users. 
It will enable him to more 
easily deploy the disease man- 
agement application he re- 
cently developed for a health- 
care firm to the desktops of 
1,000 call center clinicians 
who answer questions from 
patients with chronic diseases, 
he said. 

GETTING PERSONAL 

Beta tester Ryan Plant, a soft- 
ware development manager at 
JetBlue Airways in Salt Lake 
City, has worked with Whidbey 
for five months. 

"It's promising, for sure," he 
said. He likes how Whidbey 
automates the process of creat- 
ing personalized Web pages, 
tied to the identity of individ- 
ual users. 



Prior to Whidbey, develop- 
ers had to create user controls 
and wire them to the back-end 
database. "Now that function- 
ality is available out of the box, 
which saves 50 percent of the 
time it takes to set up an appli- 
cation," he said. 

Still, according to Plant, 
"there are tons of things Whid- 



bey could improve on." 

Topping his wish list? He 
wants IBM Rational 's model- 
ing tools to be included in 
VS.NET He also would like to 
see an intrinsic unit-testing 
framework built in. And what 
about a performance monitor- 
ing tool? "When I'm writing a 
class, I want to see how much 



memory I am using. There is 
enough risk without having to 
integrate third-party applica- 
tions," he said. 

But Plant said he is commit- 
ted for the long haul. 

"With each new build of 
Whidbey, I see more and more 
of 'Whitehorse,' " he said, re- 
ferring to the code name for 



the Web services designer that 
Microsoft says will ultimately 
enable developers to assemble 
applications. 

"I can see the day when a 
developer doesn't write as 
much code anymore," Plant 
said. "But no one is sitting up in 
a big tower, laughing about get- 
ting rid of developers." I 
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Pocket PowerBuilder 1.5.1 Optimized for XScale 

Tighter OS integration hallmark of flagship embedded RAD environment 



BY EDWARD J. CORREIA 

Sybase Inc. later this month will 
release Pocket PowerBuilder 
1.5.1, the embedded version of 
its flagship RAD environment 
that it says will include a run- 
time optimized for XScale- 
based devices running Micro- 
soft's Pocket PC 2003, and will 
support apps that print over 
wireless connections and that 
send e-mail with attachments. 

The news builds on the Feb- 
ruary release of version 1.5, 
which more tightly integrated 
with Pocket Outlook and added 
support for a number of new 
hardware peripherals. 

"For the developer, this 
means that their applications 
will run faster on those XScale- 
based devices," said Dave Fish, 
a Sybase technical evangelist, of 
the XScale optimization in the 
latest revision. 

Also introduced with version 



1.5 was access to the 
Pocket Outlook Object 
Manager, which he said 
lets applications read 
and write directly to a 
user's Pocket Outlook 
contact, e-mail and 
task databases. "There's 
already a lot of this 
information on the 
device, and developers 
don't want to duplicate 
it in the SQL database 
or have the user switch 
between applications. 
Now a developer doesn't 
have to know the [Out- 
look] API to get to 
those databases." In 
addition, PowerBuilder 
developers now can 
access Pocket PC's Notification 
bubble object to display mes- 
sage bubbles within their apps 
without a direct call to the 
underlying API, Fish said. 
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Pocket PowerBuilder 1.5 added support for the smaller display of Windows Mobile 2003. 



Version 1.5 also added sup- 
port for Microsoft's Richlnk 
digital capture control, which 
Fish said is useful for credit- 
card applications and others 



that might be capturing cus- 
tomer signatures. Digital data 
can be stored as a bitmap or 
BLOB and synchronized to a 
back-end database. Hardware 



support has been added for sev- 
eral scanners, including HP's 
Biometric scanner, a fingerprint 
recognition device built into 
some iPAQ models. 

According to Fish, Pocket 
PowerBuilder 1.5 now integrates 
with Microsoft's Visual Source- 
Safe and other version-control 
systems that conform to the 
source code control (SCC) inter- 
face. Support has been added for 
Microsoft's Windows Mobile 
2003 emulator, a free utility that 
permits on-device debugging 
without target hardware. Target 
support also has been added for 
Windows Mobile 2003, the 
SmartPhone edition of Pocket 
PC, which encompasses a small- 
er display and lacks a stylus. 

Available now, Pocket Power- 
Builder 1.5.1 will sell for US$495 
until April 1, after which the price 
goes to $1,295. Version 1.5.1 is 
a free upgrade for 1.5 users. I 



iAnywhere Doesn't Leave 
AvantGo Sync Tool Flat 

SQL integration adds relational capability to HTML 



BY EDWARD J. CORREIA 

Adding relational capability 
to what was formerly a flat Web- 
page content delivery solution for 
mobile devices, iAnywhere Solu- 
tions Inc. last month released a 
version of its AvantGo tools, now 
called M-Business Anywhere 
Developer Edition, that is inte- 
grated with SQL Anywhere Stu- 
dio, the company's mobile data- 
base development environment. 

According to Diana Ungers- 
ma, senior product manager, the 
tool can now be used by Web 
developers to build apps that pull 
data out of SQL databases and 
display it on a device in HTML. 
"It's still a Web-based interface, 
but it interfaces directly with 
your back-end system," she said. 

AvantGo developers former- 
ly stuck with static display on 
target devices now have access 
to a full-fledged relational data- 
base on the target, she added. 
"This allows them to have a 
much larger, more secure data 
set, to do more advanced query- 
ing and have two-way data syn- 
chronization through a direct tie 
to any back-end database you 
want," she said. Previously, Web 



data would synchronize only 
down to the device; updates 
from the field were performed 
by posting data in a static 
HTML form and uploading it at 
the next sync. 

Ungersma said the integra- 
tion also benefits developers 
using SQL Anywhere Studio, 
who can now use HTML and 



other Web technologies to 
design their interfaces. "Typi- 
cally that's faster and easier 
because you don't have to do 
anything device-specific. You 
don't have to learn Palm pro- 
gramming [for example] or use 
any special development tools; 
you just do Web development." 
She said the move marks the 



final phase of the Sybase Inc. 
subsidiary's integration with the 
technologies it acquired with 
AvantGo in March 2003. 
"There's always future levels of 
integration, but this is what 
we've been aiming for over the 
past year — to make these two 
products work together." 

Ungersma added that with 
help from HTML 4 support, it's 
now possible to create some 
fairly sophisticated mobile 
applications. "You can build an 
application for a device with 
a database, access it using 
JavaScript logic from within an 
HTML page, and do dynamic 



HTML layouts of that informa- 
tion," all in disconnected mode, 
she said. 

M-Business Anywhere De- 
veloper Edition is available now 
for Linux, Solaris and Windows 
servers. The tools, including the 
SQL Anywhere Studio develop- 
ment environment targeting 
Palm OS and Pocket PC, can be 
downloaded free at www 
.ianywhere.com/mbusiness_de. 
Deployment license pricing 
starts at US$299 per mobile 
user. iAnywhere also still offers 
a $69-per-user Web Edition, 
which displays static Web con- 
tent with no SQL integration. I 



NOKIA DEVELOPER PROGRAM AIMS HIGH 

Annual subscriptions include early access to devices, SDKs 



BY EDWARD J. CORREIA 

Nokia Inc. last month unveiled 
Forum Nokia Pro, its first 
annual subscription program 
that offers top developers first 
crack at new devices and SDKs 
and priority access to technical 
support. 

"This will let us segment 
the developer population we're 
dealing with and build a value 
proposition on top of that," said 
Lee Epting, Forum Nokia's vice 
president. Such value proposi- 
tions would be tailored for par- 
ticular market segments, she 
said, including the enterprise. 



Epting said the program 
came as a result of a small group 
of its 1.3 million registered 
developers demanding faster 
responses to development needs 
from the company. "One could 
think of this as an accelerated 
program. We're shooting for 200 
[participants] the first year." 

For €3,000 per year, partici- 
pating companies receive Nokia 
SDKs for unlimited developer 
seats, a Series 60 device running 
Symbian OS 7, priority e-mail- 
based technical support and a 
number of other services. "The 
package also includes priority 



requests for new and upcoming 
prototype devices, space at trade 
shows and other marketing and 
developer support events, and 
venture funding opportunities," 
she said. 

NOKIA GETS MORE SYMBIAN 

Nokia in February moved to 
nearly double its stake in Sym- 
bian Ltd., the multivendor com- 
pany that develops Symbian OS, 
when it bid to acquire the 
shares of mobile solutions 
provider Psion PLC for €137 
million plus per-device royalties 
for Psion sales of Symbian OS- 



based devices through 2005. 
Upon completion of the acquisi- 
tion, which is pending approval 
of Psion shareholders and other 
parties, Nokia would own about 
63 percent of Symbian, up from 
about 32 percent. 

According to Epting, the 
move is not an effort to gain con- 
trol of the operating system that 
powers many of its phones. "We 
increased our stake in the com- 
pany because we are committed 
to its long-term success, and to 
ensuring its development and 
that it remains competitive in 
the market. We believe strongly 
in Symbian as an independent 
operating system provider, and it 
behooves Nokia [that Symbian 
OS] support multiple vendors, 
not just Nokia." I 
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Wind River Partners on Red Hat Embedded Linux 



BY EDWARD J. CORREIA 

After flatly dismissing the possibility of 
developing a Linux distribution when it 
unveiled a broad Linux support strategy 
in October, Wind River Systems Inc. late 
last month said it plans to do just that. 

The company has partnered with 
Red Hat Inc. to develop Red Hat 
Embedded Linux, which Wind River 
marketing director Kathleen Shanahan 
said was necessary to ensure interoper- 
ability with its flagship RTOS VxWorks. 
"We want to develop a better embedded 
Linux kernel." 

Michel Genard, Wind Rivers senior 
director of market- ^^^^ 

ing, said Red Hat 
was an obvious 
choice to partner 
with, but not for 
its embedded prow- 
ess, Genard said. 
"They've tried, but 
Red Hat has not 
been strong in the 
embedded mar- Red Hat's similar 
ket." Instead, he stature made it the 
said, it is Red Hat's obvious choice, says 
track record with Wind River's Genard. 
delivering Linux 

that was attractive, as well as the fact 
that the two companies share a similar 



stature in their respective markets. 

Wind River will send an undisclosed 
number of engineers to Red Hat's West- 
ford, Mass., development center to build 
Red Hat Embedded Linux, which 
Genard said will initially target designs 
based on x86 and on PowerPC proces- 
sors from IBM and Motorola. "This rep- 
resents most of the equipment in the 
COTS [commercial off-the-shelf] mar- 
ket." Other key markets for Wind River's 



Linux strategy include telecom routers, 
switches and other carrier-grade net- 
working equipment and general embed- 
ded systems. No release timetable was 
given for the distribution. 

Genard said that Wind River's forth- 
coming Wind Power 2.0 Eclipse-based 
IDE for VxWorks and Linux announced 
last month still will target multiple Lin- 
ux distributions, despite having its own 
distribution. "We believe that people 



who develop their own flavor of Linux 
can benefit from our IDE too," he said. 
Wind Power tools will be sold separately 
for 2.4.20- and 2.4.22-based distribu- 
tions as well as bundled with Red Hat 
Embedded Linux; its kernel is yet to be 
determined. "Our goal is to make Linux 
a stable and safe solution and drive stan- 
dardization. We believe that the best 
value for the customer will be to get 
everything from Wind River." I 
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< continued from page 1 

define a consistent way for developers to 
deliver end-to-end Web services, but 
also include XML parsing and interoper- 
ability with SOAP and other transports. 
"That's important because as handset 
[applications] travel through gateways, 
it's not always possible for a SOAP proto- 
col to be transferred without some kind 
of munging," which he defined as trans- 
formation of SOAP into something dif- 
ferent. "So you need some mechanism to 
acknowledge that transformation and let 
the gateway technology take care of it." 

Rivas said that until now, Java devel- 
opers building mobile Web services were 
forced to solve these problems on their 
own. "One thing they've done is effec- 




tively written their own gateway tech- 
nologies, [connecting] their servers to 
Web services over proprietary protocols." 
JSR 172 also includes WS-I compliance, 
enabling J2ME devices to access Web 
services using XML and SOAP. Rivas said 
the addition of the Java Technology for 
the Wireless Industry (JTWI) spec helps 
to organize relevant J2ME technologies 
together, such as MIDP, wireless messag- 
ing and mobile media; JSR 172 remains 
an optional package within JTWI. Sun 
expects the new implementation, avail- 
able now, to begin shipping in devices by 
the end of this year. 

Sun's new HotSpot JVM, officially 
called Java Technology for Smartphones 
HotSpot Implementation, is available 
now along with Java Wireless Toolkit 2.1. 

Sun also has launched the Java Veri- 



fied program, an application testing ser- 
vice that it says combines the testing pro- 
grams of a list of device makers that cur- 
rently includes Motorola, Nokia, Siemens 
and Sony Ericsson. 

"We're trying to consolidate the large 
number of testing programs out there for 
Java and put them into one place sup- 
ported by major industry players," said 
Barbara Kay, Sun's director of marketing 
for mobility with security. When it was 
first announced at JavaOne in June 2003, 
the service also was to include carriers, 
but none have been announced so far. 

The Java Verified service, which is 
available now at www.javaverified.com 
and open to all, costs between US$200 
and $500, depending on the selected 
testing house and the number of hand- 
sets tested against. I 



JBOSS 



< continued from page 1 

Microsystems Inc. 

"We think we're inventing the new 
open source. It's not the ponytailed fac- 
tion on the communist fringe," Fleury 
said. "There needs to be professionalism 
and credibility. There needs to be sales 
and marketing, and all the things that 
make a business. People say you're 
either a company or a starving poet. 
Why can't we be both?" 

Fleury said the plan for JBoss is to 
release software products for free but to 
charge for support, documentation, con- 
sulting and training. "We are in it for a 
profit, but all our products are [GNU 
Lesser General Public License]," he said 
of the open-source licensing model 
under which the company has chosen to 
release products. "Our business model is 
the maintenance. We make money sell- 
ing maintenance. Think of it as BE A but 
with no upfront licenses, only the main- 
tenance part, which still is a [US] $250 
million business for them." 

TAKE A DECADE? 

Yet Yefim Natis, vice president and dis- 
tinguished analyst at Gartner Inc., said it 
could take JBoss 10 years to get there, 
and that the $250 million figure is the 
upper limit of what a company can hope 
to grow to based on support revenues 
alone. "There are two problems with the 
business model," he said. "The first is 



scalability. They now have hundreds of 
users calling for support. When they have 
thousands, they'll have a problem." Hir- 
ing will be expensive and won't fit the 
engineering culture, Natis said. 

The second problem, he said, is that 
the business of providing support by itself 
just is not that lucrative. "JBoss can only 
get a fraction of BEA's support. BEA runs 
massive, mission-critical systems." 

But Fleury said the liquidity of the 
funding will enable the company to get 
into bigger deployments in large enter- 
prises, because now enterprises can be 
assured they are getting software from a 
company on solid financial footing. 
Another benefit of the funding is that 
JBoss can more actively recruit develop- 
ers "who come out of nowhere" with code 
contributions and give them a salary. 

To show that JBoss is more than the 
app server, Fleury said the company just 
released a 1.0 version of JBoss Cache. "If 
you look at the J2EE specification, there's 
no spec for [caching]," he said. "JCache 
has been stuck in the JCP" Other projects 
include JBoss Hibernate, an object-rela- 
tional data mapping tool, and JBoss 
Nukes, the company's take on the PHP 
PostNukes content management system. 

Natis said JBoss' future lies in building 
the brand name and its reputation. "ISVs 
bundle JBoss as a default app server and 
pay JBoss for support," he said. JBoss 
"could add a fee for letting the ISV say it's 
a JBoss-based program, which means it's 
reliable. That's a value to ISVs." I 
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Software FX gets a taste of its own medicine 

Self implementation increases understanding of customer needs 
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Developers are using content management systems 
as underpinnings for project management 



orporate developers have found 
r- that content management prod- 
ucts, which now feature scripting 
languages and APIs, can form 
the basis of more elaborate 
information systems. Content manage- 
ment originated as proprietary docu- 
ment archival systems but now run on 
Internet protocols, and with some pro- 
gramming have formed the underpin- 
nings of portals and intranets. 

"It's flat-out VBScript. If you can 
write VBScript, you can tailor it to do 
whatever you want," said Ruben Santia- 
go, Internet technologist at Palo Alto, 
Calif. -based insurance company Califor- 
nia Casualty Management Co., of the 
Ektron Inc. CMS 200 system he used for 
the company's intranets. 

Santiago looked at content manage- 
ment systems after corporate downsiz- 
ing put him in the position of having to 
single-handedly update intranets run- 
ning on 30 servers. 

"It all stems from a reduction in force 
we had, and I was the only one left to 
manage the intranet," he said. At that 
point, he had to update pages he previ- 
ously supervised. 

The system his company bought cost 
US$5,000, which was much less than the 
salaries of the cut employees, and less 
than Microsoft Corp.'s Content Manage- 
ment Server. He needed something that 
could be customized quickly and didn't 
require a heavy technical background. 

"We're primarily a Microsoft shop, 
and [the alternative of] open source isn't 
really our thing because we have no 
resources to study up on it," he said. 
Moving to open source would not only 
involve learning new languages and 
tools, it would also require staying 
abreast of changes in the tools, he said. 

While Santiago used the Ektron con- 
tent management system to manage many 
Web sites with little manpower, Richard 
Brown, e-health manager at St. David's 
HealthCare Partnership in Austin, used it 
to bring a consistent appearance to Web 
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sites updated by a number of people. 

The system uses templates to stan- 
dardize sites that could be maintained by 
nontechnical staff. Each hospital has its 
own intranet, but the sites retain a com- 
mon corporate appearance, he said. In 
addition, he appreciated being able to 
limit particular areas of the page for 
updating. That way, the nontechnical 
staff could update data without altering 
the appearance of the page. He said the 
program also provided a way to update 
dynamic data by using a scripting lan- 
guage and by including header informa- 
tion linking to other files on the system. 

Like Santiago, Brown said he appreci- 
ated the Ektron system's integration with 
Microsoft tools, but he pointed out that it 
also worked with other languages, includ- 
ing PHP and ColdFusion. In addition, it 
gathered data from databases such as 



Microsoft's Access and SQL Server, 
MySQL and Oracle9i, he said. 

The system replaced e-mail and pro- 
prietary information systems that 
Nashville, Tenn.-based health-care ser- 
vices provider Hospital Corporation of 
America, a part owner of St. David's, had 
developed. It was more efficient than 
e-mail for exchanging large files and 
provided a better integrated system than 
the proprietary system did, he said. 

In addition, Web assets could be 
annotated with information about which 
sites used them, he said. 

CONVENIENCE AND FLEXIBILITY 

Because many of the systems offer 
scripting, APIs and links to external pro- 
grams, they combine the convenience of 
an out-of-box product with the flexibility 
of a custom-developed tool, said Raj 



Anantharaman, manager for Web devel- 
opment at Cerner Corp., a supplier of 
health-care information technology 
solutions based in Kansas City, Mo. 

"We took the tool and took the core 
components, then bolted on a lot of add- 
ons," he said. "We used about 50 to 60 
percent of the core that we had, and 
then we added another 5,000 lines of 
code to make the portals do what we 
wanted. We added a lot of functionality." 

Anantharaman said he thought con- 
tent management systems could be 
added to programmers' toolkits as a basis 
for developing communication systems. 

"Developers have a tendency to go 
back and write everything," he said. 
"There is this core functionality that 
can be taken and used to write other 
applications." 

► continued on page 22 
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The engineering depart- 
ment at Agfa Corp., the U.S. 
subsidiary of Belgium-based 
imaging company Agfa-Gevaert 
Group, has built several pro- 
jects based on Stellent Inc.'s 
Universal Content Manage- 



ment, starting with a document 
retrieval system in 1997 and 
moving to a system that man- 
ages and automates the process 
of designing new machinery. 
It incorporates CAD drawings, 
feature requests, bug-tracking 
and workflow management 
documents. 

"What we built is the majori- 



ty," said Chester Holleran, 
senior manager for central engi- 
neering at Agfa. "I would have to 
call the content management 
part a big enabler. Down at the 
root of everything is this big 
repository. We decided to make 
a poor man's product document 
management [system]. We con- 
tracted for a few extensions to 



the standard Stellent product 
and built our own information 
on top of that." The product 
document system managed 
changes to CAD drawings and 
comments made about product 
revisions in the company's imag- 
ing products, he said. 

While Anantharaman and 
Holleran said they believe con- 
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tent management systems can 
be used as a springboard for 
development projects, Darrell 
Delahoussaye, project portfolio 
manager for engineering pro- 
curement construction systems 
at San Francisco-based construc- 
tion giant Bechtel Corp., said he 
thinks the systems can be used to 
manage development projects. 

"Web content management is 
a low value if that's all it's focused 
on. When we talk about content, 
the Web piece is just a presenta- 
tion," he said. "The content that 
you're managing is part of a busi- 
ness process. It could be a docu- 
ment, it could be an image, it 
could be almost anything." 

ROOM FOR ALL 

Still, Delahoussaye said these 
tools don't replace traditional 
code configuration manage- 
ment tools such as Microsoft's 
Visual SourceSafe. 

"They all have a place," he 
said. "I'm not saying that one 
completely replaces the other. 
The big thing about content 
management products is they 
manage the business process, 
and developing software is a 
business. A content document 
management system is far more 
capable [than a software configu- 
ration management product] 
from a business standpoint. 
What's produced in Visual 
SourceSafe is work in progress 
that a management tool can use 
to manage the actual delivery of 
that piece of software." 

While the traditional content 
management tools handle and 
annotate the changes as the 
software is developed, the con- 
tent management system can 
track things like management 
comments on the latest release 
and feature requests. Both 
kinds of products can handle 
version control and bug-track- 
ing. Bechtel has integrated 
its Documentum Inc. content 
management system with Mi- 
crosoft's Visual SourceSafe code 
management tool so that devel- 
opers can work together on 
building software while Docu- 
mentum tracks the approval 
process and documentation. 

Agfa's Holleran said he 
prefers using code manage- 
ment software to manage the 
software development process. 

"Simulators, code checkers, 
you can do what's called code 
branching so that you can do 
variations of code — they are not 
present in a general-purpose 
repository," he said. "The soft- 
ware engineers need and want 
those things." I 
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The Evolution of CMS 



BY YVONNE L. LEE 

Content management products 
have migrated from their incep- 
tion as document storage and 
retrieval tools to repositories 
that can keep all sorts of data. 
They are now being used to fuel 
internal information systems 
and, to a lesser degree, to man- 
age software development. 

These products have become 
more powerful and far less expen- 
sive, according to research firm 
Gartner Inc. 

"More generally, the idea of 
managing application develop- 
ment, by which I mean business 
process management, is really a 
part of content management in 
the sense of content workflow," 
said Gartner analyst Lou Lath- 
am. "Somebody writes some- 
thing, they send it to their boss, 
that person reviews it and sends 
it back; maybe it goes to a lawyer 
or a marketing person as well." 

A WINDING ROAD 

The evolution from content man- 
agement to software configura- 
tion management has been slow 
and meandering, said Latham, 
adding that, to his knowledge, 
Merant Inc. is the only company 
to offer a product suite with both 
capabilities. 

At first, content management 
systems (CMS) were giant data- 
bases that could quickly look up 
and retrieve text-based files. 
FileNet Corp. and Documentum 
Inc., a division of EMC Corp., 
were among the first to build sys- 
tems for searching and scanning 
text and microfilm documents. 

When the Web arrived, man- 
ufacturers of those systems de- 
cided to capitalize with products 
that could archive and search 
other kinds of files, particularly 
executable code and graphics, 
Latham said. Vignette Corp. and 
Interwoven Inc. staked their 
claims in this area, he said. 

Then, organizations began to 
use programmable communica- 
tions software to store frequently 
used documents, such as human 
resources manuals. "When you 
look at things like Open Text 
Live Link or even Lotus Notes, 
you have a contentlike frame- 
work where development can 
occur. Any domain where people 
are working, people are going to 
have documents," Latham said. 

"The trend was for document 
management and Web content 
management to accrete together 
into a system that's agnostic to the 



file format of the data," he added. 
"This has come over the last two 
or three years to be called enter- 
prise content management. So, 
you have FileNet, Documentum, 
IBM, Interwoven, Vignette and 



Stellent over on the Web content 
side, building systems that more 
or less resemble one another and 
cover the same space." 

Because of the large number 
of companies and products in the 



space, there has been consolida- 
tion in the past three years, plus 
the large number of similar prod- 
ucts has pushed prices down, said 
Latham. "Web content manage- 
ment, per se, since it's almost dis- 
appeared as a specialty, is really a 
commodity." Ektron Inc. and 
Macromedia Inc. are the only 
remaining specialists. Everyone 



else, he said, has combined this 
capability with other kinds of 
document management. 

"The average price of a con- 
tent management system... just for 
Web content management alone 
was $500,000 in 1999," said Lath- 
am. "In 2003, it was $150,000. It's 
dropped by 50 percent every two 
years since 1999." I 
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EDITORIAL 

The ASP Era Returns 

When Web services first appeared, many vendors, 
most notably Microsoft Corp., envisioned them as 
opening an exciting market. SOAP-based XML Web ser- 
vices would allow service providers, large and small, to 
expose their functionality to customers and partners. 
What's more, both enterprises and independent software 
vendors would be able to monetize their business logic 
and IT assets by renting out their Web services by the 
month, or by the click. 

That dream didn't come true, not at first. Web services 
found their core market not through publicly exposed inter- 
faces listed in UDDI directories, but in point-to-point or 
limited multipoint integration projects, safely locked away 
within a corporate data center. When Web services were 
exposed over the Internet, the earliest examples — such as 
airlines and rental-car agencies being able to share passen- 
ger information — were tightly controlled. They were little 
more than simplified EDI using a different set of protocols. 

That's not to say that the industry ever gave up on pub- 
lic-facing Web services. 

Microsoft, after taking a public beating with its "Hail- 
Storm" initiative for Web services-based authentication 
services, is now resurgent with an enhanced MapPoint 
offering that lets sites add mapping and location services 
on a subscription basis. Auction service eBay is letting 
companies as diverse as Disney, General Electric and 
Sears use Web services to populate a real-time sales 
channel with dynamic inventory management and fulfill- 
ment. Amazon.com offers a fixed-price commerce site 
where retail businesses can set up their own storefronts. 

The business model behind commercial Web services 
is still unproven; certainly, not all initial contacts are being 
renewed at these major sites, or at any number of smaller 
Web services providers. Yet the technology model 
appears to be sound. Large service providers (some of 
which are former dot-coms, like Amazon and eBay, and 
some are technology firms like Microsoft) have made a 
tremendous investment in an infrastructure that has 
applications beyond their own core businesses of selling 
books, auctions and software. If your company has needs 
that would benefit from that infrastructure, why reinvent 
the wheel? While the price for those hosted Web services 
might be steep, compare it against the cost of building 
such back-end applications from scratch. 

Still, you should move cautiously, especially when 
using such commercial Web services to deliver core val- 
ue to your enterprise. While it's unlikely that these flag- 
ship vendors would shut down their commercial Web 
services, smaller vendors might do so. It's also not 
impossible that even the big guys would curtail those 
services if there's insufficient profit to maintain them — 
or that they might increase prices if they prove to be 
extremely popular. You would also be vulnerable if the 
Web services provider made significant changes in its 
service offerings, perhaps requiring technologies that 
you don't want to deploy. 

In other words, it's the application service provider 
market all over again. Truly, nothing ever changes — 
except that there's additional security because the com- 
mercial Web services are not a profitless venture-funded 
dot-com's primary line of business. That makes any mod- 
ern ASP bet a safer one. I 
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UML 2.0: EXPLOITING ABSTRACTION AND AUTOMATION 



Object Management Group 
Inc. (OMG) standardized 
the initial version of the Unified 
Modeling Language (UML) in 
1997. Since then, UML has 
been very widely adopted by 
both industry and academia as 
the language of choice for 
describing the architectures of 
software systems. This is 
reflected in the fact that 
it is currently supported 
by literally hundreds of 
commercial tools. 

In June 2003, the 
Architecture Board of 
OMG approved the 
proposal for the first 
major revision of UML, 
version 2.0. This is the initial 
step in the standardization 
process slated for completion 
by this summer. If the ambi- 
tious goals behind it are real- 
ized, UML 2.0 will represent a 
major milestone in the evolu- 
tion of software development 
technologies. 

This is because the primary 
driving force behind UML 2.0 
is model-driven development, 
an approach to developing soft- 
ware that shifts the focus of 
development from code to 
models, and to automatically 
maintaining the relationship 
between the two. The essence 
of software modeling (as in all 
modeling) is abstraction: the 
removal of fickle and distract- 
ing detail of implementation 
technologies as well as the use 
of concepts that allow more 
direct expression of phenome- 
na in the problem domain. 

ART OF ABSTRACTION 

Given the increasing sophistica- 
tion of todays software applica- 
tions, the solution to the current 
software crisis must inevitably 
rely on increased levels of 
abstraction when specifying soft- 
ware. Abstraction is really the 
only effective means that we 
have of dealing with complexity 
that overwhelms our cognitive 
capacities. 

However, there is more to 
model-driven development than 
just the concept of models, 
which, after all, is an idea that 
has been around almost as long 
as software. The second key 
ingredient of model-driven 
development is an increased lev- 
el of automation — that is, the use 
of computers to automate many 
of the mechanistic tasks involved 
with software implementation. 




Once again, we are on safe 
ground here: Automation has 
been the traditional technologi- 
cal solution whenever it was nec- 
essary to significantly improve 
productivity and reliability. 

Automation in model-driven 
development is much more than 
just automatic code generation 
directly from models. It 
includes automatic veri- 
fication of software spec- 
ifications to ensure that 
the system satisfies its 
requirements. 

This is an objective 
that is much more easily 
achievable using mod- 
ern modeling languages 
such as UML 2.0, because the 
concepts in such languages can 
be made to behave much better 
than the concepts in traditional 
programming languages, where 
a single misaligned pointer can 
lead to multimillion-dollar sys- 
tem failures. Automation also 
includes the crucial ability to 
execute abstract and incom- 
plete models using computers. 
In particular, it must be possi- 
ble to do this with very abstract 
and incomplete models defined 
early in the development cycle 
because this is when all the key 
architectural decisions are 
made. Finally, automation also 
means the ability to automati- 
cally generate test cases and 
test harnesses for automatically 
driving those test cases. 

The dual themes of automa- 
tion and abstraction were the 
dominant design forces in the 
definition of UML 2.0. Their 
effect, however, is not immedi- 
ately obvious. An experienced 
UML user will find most of the 
familiar landscape with some 
extensions of existing capabili- 
ties and a relatively small num- 
ber of new features. 

INNER WORKINGS 

Most of what is new, however, 
is "under the hood": a more 
precise and more comprehen- 
sive definition of the runtime 
semantics of UML, and a much 
tighter and more formal defini- 
tion of the meaning of the 
modeling concepts and their 
mutual relationships. These are 
necessary to support the 
automation objectives, since 
automation is usually only pos- 
sible if there is no ambiguity. 
They reflect the extension of 
UML from being primarily a 
descriptive language to one 



that can also be prescriptive, as 
a matter of choice. 

This does not mean that 
UML is a programming lan- 
guage in the traditional sense. 
The broad scope of UML still 
demands the possibility of 
semantic variation — the ability 
to customize the language for 
specific domains and purposes. 

For example, the runtime 
semantics of UML, which are 
founded on the notion of causal- 
ly connected event traces, are 
still open to different specializa- 
tions. Thus, they can be adjusted 
to support either a synchronous 
worldview (i.e., a view in which 
all events occur to the discrete 
beat of some global clock) or an 
asynchronous one. This allows 
UML to be used in either type 
of situation and, possibly, in 
some combination of the two. 

The necessary semantic 
tightening is easily achieved 
through the specification of the 
appropriate profiles. To support 
this, the profile mechanism in 
UML 2.0 was improved and 
simplified. Since proper UML 
profiles are always compatible 
with standard UML, people 
using profiles can reuse their 
knowledge of standard UML as 
well as any tools that support 
standard UML. 

In addition to the semantic 
tightening required to support 
automation, several important 
new features and extensions 
have been added to UML. Per- 
haps the most notable is the 
ability to use UML to effec- 
tively model very large soft- 
ware systems (where the 
capacity for abstraction is 
needed most). This includes 
new modeling concepts for 
specifying dynamically and sta- 
tically interconnected patterns 
of object structures, as well as 
concepts for specifying com- 
plex object interaction pat- 
terns. These capabilities have 
been distilled from existing 
architectural description lan- 
guages and standards such as 
Acme, MSC 2000, SDL 2000 
and UML-RT 

In addition, UML 2.0 has 
the ability to specify complex 
functions (activities) based on 
the capabilities defined in de 
facto industry standards, such 
as BPEL4WS (a de facto 
industry standard language for 
Web services and business 
process modeling), and tradi- 
tional techniques used in sys- 
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terns engineering. 

Because all of these capabili- 
ties can be applied recursively, 
they are useful at any level of 
abstraction, thereby covering the 
range from relatively small to the 
largest systems. This ability of 
UML 2.0 to scale up simply 
yet effectively is one of its most 
distinguishing characteristics. 

MORE GIRTH 

Of course, the introduction of 
new features means that the 
girth of the language has 
increased compared with pre- 
vious versions. This raises rea- 
sonable concerns about the 
complexity of the language (so- 
called "language bloat" has led 
to the demise of more than one 
well-intentioned programming 
language). To counter this 
effect, UML 2.0 has been mod- 
ularized into a set of sublan- 
guages, many of which are 
independent of each other. 

Hence, learning and using 
UML 2.0 is not an "all or noth- 
ing" proposition. Just like one 
does not need to know all of the 
English language to use it effec- 
tively, users of UML can select 
only those parts that are of use 
in solving their problem. The 
rest can be safely ignored. 

In a sense, UML 2.0 has 
merely repeated the pattern of 
successful innovations intro- 
duced by the so-called third 
generation of programming lan- 
guages, by increasing the levels 
of abstraction and automation. 
It holds the promise of releasing 
us from the programming lan- 
guage trap in which we have 
been mired for over four 
decades. 

This is not merely a promise 
for the future. Powerful model- 
driven development tools are 
now available from Borland, 
IBM and other major tools ven- 
dors. These tools have been 
used successfully in numerous 
large model-driven develop- 
ment projects. The maturity of 
these tools and related tech- 
niques is borne out by the Mod- 
el Driven Architecture (MDA) 
initiative launched by OMG, 
whose objective is to define a 
set of industry standards that 
directly support model-driven 
development. The UML 2.0 
standard is one of the keystones 
of this initiative. I 

Bran Selic is principal engineer 
at IBM Rational Software Cana- 
da, and co-chair of the UML 
task force within Object Man- 
agement Group Inc. responsible 
for ratifying UML 2.0. 



OPEN-SOURCE JAVA NOW 



Unless your Web connection 
is permanently set to collect- 
ing Teletubbie memorabilia pric- 
ing on eBay, you already know 
that a substantial part of Win- 
dows NT and Windows 2000s 
source code was swiped and 
made available over the Internet. 

Only a few days later, any 
notion that security by obscuri- 
ty was really that bright an idea 
was wiped out when the first 
exploit, using images to run 
unauthorized code in Internet 
Explorer 5, appeared. 

Since my opinion of Win- 
dows security was 
already lower than 
ditch water, this came 
as no surprise to me. 
Besides, Jim Allchin, 
group vice president of 
Microsoft's platforms 
division, himself admit- 
ted under oath a couple 
of years back that some 
of Microsoft's code was so poor 
that simply revealing it could 
lead to security problems. 

Well, for any doubters there, 
we now know that Allchin had 
been completely candid. It took 
three — count 'em, three — days 
from the code's release for the 
first successful crack to occur. 

I hope that will finally kill 
off the moronic notion held by 
proprietary software vendors 
everywhere that somehow 
security by obscurity is good 
security. It's not. 

In fact, maybe it's time for 
people to recognize that open 
source really is the best way to 
program in many cases. Please 
notice I don't say all cases. I'm 
convinced that smaller, less 
exciting projects, like, say, real 
estate management programs, 
languish in open source. You 
can certainly do such programs 
as open source, but you'd be 
foolish to expect to get a lot of 
good from open-sourcing them. 

But bigger, more exciting 
projects that can garner a siz- 
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able development community, 
like operating systems, Web 
application servers or lan- 
guages, do quite well. This isn't 
just me spouting off as an 
open-source advocate. All you 
need do is look at the biggest 
open-source success stories — 
Linux, the BSDs, Apache and 
Samba — to realize that some- 
thing profoundly powerful is 
going on here. 

It's not just me. According to 
Evans Data Corp.'s latest North 
American Developer Popula- 
tion Study, more than 1.1 mil- 
lion developers are 
already working on 
open-source projects. 

So why not add Java 
to that list? 

That's the question 
that Eric Raymond, 
president of the Open 
Source Initiative, asked 
recently in an open let- 
ter (www.catb.org/~esr/writings 
/let-java-go.html) to Sun's Scott 
McNealy, after McNealy told 
analysts, "The open-source 
model is our friend." 

OK, Scott. Prove it. Release 
Java as open source. 

Raymond points out that 
besides simply producing more 
secure code, open-source soft- 
ware tends to win eventually in 
the marketplace. He looks at 
Sun's own history — and, you 
know, he's got some good 
points. When Sun has gone 
open, as it did with Network 
File System (NFS) and 
OpenOffice, it has done quite 
well. On the flip side, when Sun 
keeps control, it loses. Remem- 
ber the now-almost-forgotten 
NeWS? Instead, the X Window 
System became the de facto 
network windowing system for 
Unix. What about Jini? That ini- 
tiative has never lived up to its 
promise as a universal network- 
service protocol. 

While I don't buy Ray- 
mond's argument that other 



languages may eventually over- 
take Java — well, not Perl any- 
way, maybe Python — I do agree 
that Java would be better if it 
were truly open source. 

The code would be cleaned 
up. We'd end up with fewer 
confusing Java initiatives since 
open source is a pure meritoc- 
racy where only the best pro- 
jects survive. Heck, it would 
probably be faster, too. The 
JBoss application server, for 
example, which is open source, 
is no slouch when it comes to 
speed. Cleaner, less confusing 
and faster — what's not to like? 

Mind you, I think the Java 
Community Process has done 
well by Java, but far too often 
Java tends to end up mired 
in political battles — like the 
never-ending Eclipse squab- 
ble — and so energy is wasted 
on business versus business 
politics instead of developing 
the most effective language 
possible. 

Early signs are that Sun is 
not going to do it. Does this 
come as a surprise? I find it 
surprising that McNealy still 
gets open source confused 
with zero revenue. As the say- 
ing goes, free software is free 
as in speech, not as in beer. 
You'd think eventually he'd fig- 
ure out that IBM isn't embrac- 
ing open source out of ideal- 
ism; it's doing so because 
business models that support 
open source are profitable. 

So it is that I hope Sun will 
reconsider. Make the code open 
source, put James Gosling in 
charge of the one true Java — 
hey, it works for Linus Torvalds 
and Linux — and turn the JCP 
into an open-source consortium. 

We'd end up with a better 
language, and Sun might just 
find that the open-source mod- 
el really is its friend. I 

Steven}. Vaughan-Nichols is edi- 
tor of Practical Technology 
(www.practical-tech.com) and 
has worked as a programmer for 
NASA and the Dept. of Defense. 



LETTERS TO THE EDITOR 



TRANSFORMATION TROUBLE 

In David Rubinstein's Industry 
Watch column ["Two Sides to 
Every Transformation," Jan. 15, 
page 26, or at www.sdtimes 
.com/cols/industrywatch_094 
.htm], much of what Forrester 
Research analyst Phil Murphy 
says is "spot on." But then I 
enjoy polemics. 

Boris Yeltsin is quoted as 
saying of socialism, "It's a 



shame that it couldn't have 
been tried on a smaller coun- 
try, then so many people 
would not have had to die 
to prove it won't work!" Re- 
engineering as transformation 
is another attempt at a 
planned economy (i.e., Mus- 
solini, NRA, USSR). As a jour- 
nalist-political author wrote, 
"Whenever small minds face 
big problems they come up 



with crackpot solutions." 

Visit some high-level execu- 
tive recruiter and ask to see 
his pile of resumes of CIOs 
and senior VPs who tried 
re-engineering. Be sure that 
this stack of former $400,000- 
per-year people will be at least 
knee-high! That said, pay close 
attention to Ulrich; his breadth 
of knowledge is great, and if 
anyone can get it right, it may 
be him. 

John Walsh 
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THE REST IS SALIENT 



The "three pillars of Longhorn" are 
a new display stack, a service-orient- 
ed messaging model and a metadata- 
oriented data store. Individually known 
as "Avalon," "Indigo" and "WinFS," and 
together as "WinFX," these technolo- 
gies have a common theme: increasing 
the interplay between processes and 
applications. 

While Avalon's vector-based structure 
and knowledge of media (particularly 
video) may lead to a few killer stand-alone 
applications, what the WinFX technolo- 
gies primarily facilitate are opportunities 
in aggregation, integration and distribu- 
tion. In short, they're trying to bring the 
value of the Web right through the Ether- 
net port and into the operating system. 

This analogy doesn't derive from the 
client-side Web experience (what gets 
represented inside browsers), but rather 
from the server side, where great value 
is continually being discovered by focus- 
ing on the ways in which resources refer 
and interact with each other. 

For instance, Google has done more 
to deliver "information at your finger- 
tips" than anything Microsoft has ever 
shipped, and the key to Google's original 
page-ranking algorithm was that it rec- 
ognized the value of inbound links, 
resources that are beyond the control of 
the page's original author. 



At the other extreme of scale, I can 
create a scuba-diving forecast by retriev- 
ing, shredding and recombining resources 
that individually say nothing about visibil- 
ity in Monterey, Calif, (wind speeds at off- 
shore buoys, aviation forecasts in nearby 
Salinas, etc.). In the middle are the early 
adopters of Web services who are now 
discovering that meaningful business 
intelligence can be generated as 
much from message flow as from 
final transaction analysis. 

Similarly, the main benefits of 
Indigo, WinFS and XAML (Aval- 
on's technique for implementing 
application user interface design 
in a declarative markup language) 
are not so much what they can 
deliver to single applications, but 
what they facilitate in terms of multiappli- 
cation interaction. 

Of course, it's not a coincidence that 
this vision of how computers should cre- 
ate value promotes an ever-increasing 
dependence on rich clients. You can get 
only so far criticizing browser-based appli- 
cations on aesthetic grounds; by integrat- 
ing individual processes on the local 
machine into a service-oriented ecosys- 
tem, Longhorn pretty much closes the 
door on the concept of a universal client. 

Not so coincidentally, I've been re- 
reading Roy Fielding's "Architectural 
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Styles and the Design of Network-based 
Software Architectures" (available at 
www. ics . uci . edu/~ fielding/pubs/dissertation 
/top.htm). Fielding is co-founder of the 
Apache Group and co-author of the 
HTTP and URI standards, and his thesis 
details what he calls the REST architec- 
tural style — a style he claims is part and 
parcel of the World Wide Web's value. 

Regular readers will know that I'm a 
fan of REST. My first XML-over-HTTP 
solution shipped in 1999 (well, it "got to 
alpha" and never shipped, but 
that was just one of those dot- 
com things) and convinced me of 
the value of what became known 
as Web services. 

All of the acronyms that have 
emerged since have seemed to 
be, at best, tangential to the fun- 
damental benefit of passing uni- 
versally interpretable documents 
over a universally available bus and 
manipulating them with a small number 
of standard actions. I'm not one of those 
who dismisses the "Web Services Stack" 
as fundamentally wrong-headed, but I 
think it's wrong to elevate the problem of, 
say, service discovery to the same stature 
as the problems of interpretation, state- 
fulness and cachability. 

Which brings us back to WinFX. If 
the phrase "hypermedia as the engine of 
application state" seems to you to be 
part and parcel of the Web's real value, 
WinFX is going to disappoint you, or at 



least present the same tangential rele- 
vance to creating customer value. Yes, 
you'll have an opportunity to derive val- 
ue from interacting processes and appli- 
cations. No, the architecture won't be 
given to you on a silver platter. Microsoft 
does not dictate application architec- 
ture — whether that pleases or frustrates 
you has hopefully been a factor in your 
choice of.NET or J2EE. 

Microsoft does, of course, provide 
reams of guidance. The rub has always 
been finding the relevant guidance, 
especially when "not quite right, but 
right now" guidance is just an MSDN 
site search away. Microsoft's "Patterns 
and Practices" Web site and "application 
blocks" (www.microsoft.com/resources 
/practices/default. asp) are emerging as 
the top of the pyramid for SD Times 
readers. Hopefully, there eventually will 
be an application block on aggregating, 
integrating and distributing information 
in a WinFX software ecosystem. Until 
that time, though, such applications are 
going to be high-risk, high-reward. 

Even without explicit guidance from 
Microsoft, you will be able to create 
REST-ful architectures in WinFX, and 
in my opinion, such architectures will 
often be the right choice. I 

Larry O'Brien is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 
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TheServerSide JAVA SYMPOSIUM 

MAY 6-0, 2004 | THE VENETIAN | LAS VEGAS 



What is TheServerSide Symposium? 



TfreServerSlde Java Symposium ^May 6-8. 2QHH The Venetian. Las 
Vegas. U5A|i is Ihe Java rammunhys mast focused and jespccted t-echnh 
cal conlefence. Focused on setver-slcte Java technologies and develop- 
TUP.nl praclkss, the evenl is differentiated by an all si ar lineup cif speak- 
ers crwjsen for thelf contributions lo Ihe enler prise lava developmenl 
community, as well as an extremely (ethnical and advanced set gf IfcK 
nfcal sessions mat are nc* found at less specialized on moie commercial 
shows, if you pi? rurrpntly building entpr prist* Java a-ppliralinps nr plan 
ning. to continue! ckting so in Hie neat lew years, Ihls is iKri u sJiow lo be 
ml^ed, 



Who will be ihere? 



TheServerSsde Java Symposium has assemhled an Incredible team of 
peopfc ftiy invite only! who have t>eon contributing to the enterprise Java 
spjcL 1 . Their work has undoubljMJIy Influenced Ihe way w? develop today 
or mlglif be developing enlerpilse applications tomorrow, Among, line 
speakers are: 

people defining Ihp J2LI platfqrm and re-J^ted technology- J2£E *PW 
ncation lead Miirh Hapntr, ejh spec lead Unda ncMkhirt. hip 
txecutive Committee members Kkhard Monson-HaefeJ. and Jason 
HUnEur, and milny irthi?r uxpert ^ruup members. 
rw»|w open source ptoject cornmltlers/foundets, hotinder or iBoss and 
CEO of J Bast Inc Marc Fltrury. Hibernate founder Gavin Kfeng, lueerie 
creatof Doug tuning, Tapestry's Howard Lewis Stilp, Apadhe Cactus 
founder and Mavm committer Vincent Massol, Op^nSympony Gmup 
founeler/coretleveKjpef Mike Cannon-Brookes, and olhefs. 
Authors of Important enlerprise dm/ekipiTienE books. Mofp than 12 

book authuu uniludlngcore jzee Patterns authoi John crupl. J2EE 
Design and Development Author ftod Johnson. Enlerpri-se |,niegraiion 
Patterns author Ceegor Hohpc, Aglfc'OO w ller Scott Amblet, Ted 
Neward. ar*d others, 

Influence and other community contnbulurs, TheScrVtTSIde.COiTI cre- 
ator Hoyd Mannescu, inleipilse MWdlewa^e venlure capital partner 
Ptter Fnsnton. artd others. 



Why attend TheServerSide Java Symposium? 



Held in ihe Iradlllwi of TheServertlde.confs Tecti"telfcs. Ihls show will 
be a unique -chance rD: 

- -Stay competmve in iM-nys economy with Ihe latesl knowledge 

- Improve your enterprise Java knowledge with newfound best 
practices 

■ Network wllh Ihe Inp experts in Ihe industry, forming relationships lo 
last a lifetime that will help you down the read 

■ -Get advlre from the world's leading aulhoritlei In I2EE on crilkal Ver- 
sions your projects are Facing. 

Re a part of the greatest enleipf ise Java community event happening 
this year. 



Early bird specials! 



II you're* Jhinking abnul benefiling from Ihls unique communily evenl. 
tflsli rMlp.//wwwlliesi!h*rsfde-Corn.'syrnposluin. There are "llmlled seats 
bin there is a greai demand 



11095 by March 11st 
51105 by April Both 
S129S in May 



Register using. prDniu code: 

JSDT 

lo like advantage of Hip 

following saving 



Raster wrty -and you get g free, gutp-graphed in-p^rwn book wrth^n 
by one ol out many book autnots who are speaklrie at the tveiii. 




Httre are ]ust iome talks at the event: 



Csbp Study - J2EE Design aTtd Archltecfure behind Major 
Automotive Manufacturer'! Rrunce Stic 

Gti^Juw Atthftml ut Sun. 
This esse study wtll deHiibe tbe nefartarlnES arid 
deil^n tiutihid u vtry la^u jutocnotl^e Finance iltt_7he 
talk wlfl cweT (he t-mtlal destgn and Identified Tefactor- 
ln^ cundldaiCS. It wtll dlSOISS the various J2EE t^dhnold- 

gKS a-tid (he rationale behind their selection and ine 

heavy use Of Core J2£E Patterns. FinalFy. It Will destrith? 
the pf ocess and Impact o( Ihe design Changes and it's 
impart on overall perTormaTic?. 

Case Study: Production xqcipzy 

JilSOff Halter - StftfWi JSP, JAXP [NltiXQl E^iL'ri Li-ULijL- iM^nlCi t 'J. JCP 

fwcuttvir CmtmHttA m r n fnr^pflc^e, ^-nuih^rofjDOf^ Author, Am? 
Sm-'^Lt P ." iL^-'Liri irrh : j iy. fimMsCQfn mm. 

As XQuery near* rompletlon, how hmg before we can 
use It In prodLKUonP TUc- answer Is, wo already tan I In 
this session. we'H linok at several working, XUuery 
deployirienl^ and dissec t Haw they work_ Tbere'^ m 
heller way to undersland a new query language than to 
see it In otiiOfl. 

Inside Apache GeranEmo 

JWdiui-d 1 iVfL-zbijfr Houfci a utnev. fnretp' l^. 4 Jliv d ir^ns, eie &tp&t gwup 

Aimough Apaclrc ceronlmo is still a work in pioyoss. 
miich of its rone f unctlanality has already fewn 
designed and iiiipiwuentofl. nils presentation Mplaltis 
hgw thp C.pmnimo applicalsnn server wnrk? nn Ihe 
lrislde ; how It htib been linplcrnorrtod and how It func- 
tions at runtime- 








Opportunities In Infrastructure software; venture capita perspective 
on starling and building lomomnv's SEA 

Enterprise infrastructure Vrntmc QrptU Ffcm ftflf 1 1«.'' 
Accel partners has been an active- invuslcjr In sohwan? Fijt the past 
20 years, investing In brand-name companies sutfi as 
Rjeal Networks, Veritas, Macromedia, Rpmedy, and 
Motive software. Peter Fenton. a general partnor with 
the firm, will discuss ihe Accel's piprspecijve ^n (he cur- 
tl-eii! Hivirumnt'iit dr<jdS u1 opportujilty In JZEE, Web 
sendee*, and XML 5trateBles for bulkltng a startup Iti a 
posi-bubble economy, and Atcci's ffilcr f or new Invust- 
Tnenl opportunities 

J2 TV WllhflUl EJB 

Rod Jofrniiin - SUftfW 2.4 expert qiutsp mtfmir^. ^ui/wr. -^rfptrf uvM^on- 
ofw. i* ami iVTv^topmeni, ftw/ndffo/ 5pf Jny Hanizwork, 

In the tasl fpw yearc, many prohlems huvt* emerged with Ihe tradi- 
tional EJB-centrlc approach to J2EE architecture, in 
2003-4 we have seen the emergence of robust alterna- 
tive infrastructures. Tins preserrtauon will discuss: 
Lightweight Inversion of Control containers as an atter 
riatlvc to tho EJB component model. tn?e iniportarKtui 
rrcin-invasive Frainewrcrk^ M-pstoring QOPlo rts rightful 
place lei JZEE applications. Llsln^ AOP tu ruj-ilacu due la r- 
ath^e fclB services 5UCti as tran^arrion man^gemenl ]ran^parent per- 
slsteriLu wllh HlbeniatL and ottier leiUnuJo^ios, Designing appllcafions 
to aliovu compretienstve unll lestlng and "test Driven Oevelopmem. 
and Gise sludlev 
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THE NEXT CHALLENGE FOR OPEN SOURCE 



A widely believed fallacy is that the 
global population will continue to 
grow inexorably and that in our chil- 
dren's lifetime something will have to 
change if the Earth is ever to feed so 
many mouths. The reality is that almost 
all social scientists who study population 
trends expect global population to peak 
around 2050, before entering into a long 
cycle of decline. 

Signs of this trend are already evi- 
dent. Italy's population has been con- 
tracting for years; Russia's even more 
so. The problem governments face in 
reversing this trend is that volunteers 
cannot be induced to undertake the 
long-term, high-effort assignment of 
rearing a child if they don't want to. 

A common misperception in soft- 
ware is that open-source products are 
likely to be widely adopted in all seg- 
ments of computing. IT's embrace of 
Apache and Linux and its increasing 
friendliness toward MySQL and JBoss 
suggest that open source can prevail 
anywhere it chooses to go. The success 
of Sun's OpenOffice would seem fur- 
ther confirmation of this. This well- 
deserved success has been validated by 
open source's reliability, performance 
and richness of features. 

However, open source is at the mer- 



cy of those volunteers for the develop- 
ment of new products. And like the 
countries of the world, it's not clear the 
population of open-source projects is 
growing in the directions that enable it 
to expand its franchise. The problem is 
that volunteers cannot be induced to 

sffort 
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undertake a long-term, high 
assignment (developing a com- 
munity to support a full- 
fledged product) if they don't 
want to. 

One look at SourceForge 
shows the reality of this view: 
Of the 75,000 hosted projects, 
far fewer than 1 percent are at 
all active. The problem funda- 
mentally is that good software 
takes a lot of man-hours to write and so 
inherently requires a dedicated com- 
munity. If a group cannot be attracted 
to a given product, there will simply be 
no open-source implementation of it. 

As a result, open-source projects 
tend to fall into a few defined niches: 
programming tools (of course), operat- 
ing systems and admin tools, games 
and music. Go to SourceForge's top 
50 projects (based on their activity lev- 
els) and you'll find very few products 
outside this narrow range. There is 
nothing wrong with this, but it does Sybase and Informix, how could a new 



suggest that open-source developers 
spend a lot of time reinventing writing 
tools, such as IDEs, editors and com- 
pilers, in particular, as well as music 
rippers and burners. 

For open source to spread into oth- 
er areas, developers need to be 
induced into writing other software, 
such as business apps: data warehous- 
ing, full accounting packages, business 
analytics, ERR In specific industries, 
the lack of open-source vertical 
applications is striking — just as 
it is in the consumer space 
once you remove games and 
music. So, what needs to 
change in this model if open 
source is to move forward? 

Given, as I said earlier, that 
you cannot induce volunteers 
to dedicate considerable per- 
sonal time to projects that don't inter- 
est them, the solution will need to 
come from elsewhere. The vendors 
themselves will need to open their 
products as open source. This might 
seem ridiculously impractical. Why 
would a vendor of business analytics 
open up its source code just to be con- 
sidered open source? 

Actually, there are good reasons. 
Given the hammerlock IBM, Oracle 
and Microsoft have on the database 
market, and the recent flameout of 



company expect to succeed in the data- 
base market? Let's ask MySQL. Given 
the hammerlock IBM, BEA, Oracle 
and Sun have on the Java server mar- 
ket, how does a company hope to suc- 
ceed in this market? Let's ask JBoss. 

Increasingly, start-ups that want to 
play in busy markets are finding suc- 
cess in open-source approaches. It 
gives them a distinct competitive 
advantage; and good licensing terms 
mean the company can seed the mar- 
ket with its products. If JBoss and 
MySQL enjoy successful IPOs during 
the next few years, this open-source 
model might suddenly catch on. 

What is not clear in this scenario is 
whether two companies can compete 
in the same market with open-source 
products. Successful competition of 
this kind has never occurred. (The Lin- 
ux market comes the closest, and it is 
hardly a supporting example.) He who 
goes first tends to do best. 

If the next few years prove to be 
good ones for established open-source 
vendors and, more important, for IPOs 
of open-source companies, then open 
source will indeed flourish everywhere. 
Otherwise, it will remain confined 
strictly to the niches of interest to the 
volunteer programmers. I 

Andrew Binstock is the principal ana- 
lyst at Pacific Data Works LLC. 



ANNOUNCING THE SD TIMES WEB SEMINAR SERIES 




I hi: SD tint's Web Seminar Series addresses some of the 
huLLesL issues rating software development managers, 
project, managers. Learn leaders and architects^ When time 
is aL a premium, Lune in and learn how to solve your most 
pressing problems without even leaving your office^ 




Watch the pages of 
SD Times for more 

inlurmation on how 
to sign up and 

attend these FREE 
Wth seminars' 



Taking Control of Your 
Application Development Life Cycle 

Dale: April 29, 2 004 

Time; 2:00 PM Easlcrn/1 1 ;00 AM Pacific 

Deadline for Sponsorships; Immediate. Call now! 

Implementing Sarbanes-Oxley NOW! 

Date: May 3Q r 2004 

Thru:: 2:00 PM Eastern/11 :00 AM Pacific 

Deadline for Sponsorships; April B r 2004 

Tying IT All Together With 
Business Integration 

Date: June 22, 2004 

Time: 2:00 PM Eastern/11 :00 AM Pacific 

Deadline for Sponsorships: April 28, 2004 

Web Performance Turning For 
Customer-racing Web Sites 

Dale: July 29, 2004 

lime: 2:00 PM tastcrn/11 :00 AM Pacific 

Deadline for Sponsorships: May 27, 2004 




For sponsorship informal inn, contact Ted Ban 

v 51E-922-21Q1 nl 01 or lcd@himedia.( 
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COMMUNITY VS. COMPANY 
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arc Fleury, the CEO of the newly 
incorporated JBoss Inc., is fed up. 

"I'm tired of people thinking open 
source is free, peace and love, yadda 
yadda. We have a strong profit motive." 

Yet many people creating open- 
source software do not have any kind of 
profit motive, and therein lies the root 
of Fleury's exasperation. Open-source 
software can be obtained for free, from 
a wide number of communities 
that exist just for that purpose. 
The whole thing gets messy 
only when companies come in, 
put a pretty package on it and 
announce it's now for sale — or 
when people poach or other- 
wise unwittingly obtain code 
from open-source projects to 
build into proprietary software, 
but that's a whole other column 
another time. 

Fleury thinks he knows better. So 
does Novell CEO Jack Messman and 
others who are looking to create what 
Fleury calls "second-generation" open- 
source software companies. These 
executives understand that you can 
price software at a million dollars or 
give it away for nothing, but if the cor- 
porate infrastructure is not in place to 
support customers, there won't be any 
customers. 

"We call it professional open source," 
Fleury explained in an exclusive inter- 
view with SD Times. "I know it sounds 
vacuous. There's an open-source compo- 
nent, but it's about licenses, and com- 
munities built around codebases." 
Fleury said Linus Torvalds once said 
that Linux is really 10 people. "They're 
all professionals, getting paid by IBM 
and Red Hat and OSDL. Then, a large 
community does QA and extends it." 
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What Novell and Red Hat do, and 
what JBoss will have to grow to do, is 
prove it can handle supporting large 
enterprise customers around the globe, 
at all hours of the day and night. 

But there's an old saying that goes 
something like "Money talks, and cow 
chips walk." So to fight this fight, JBoss 
Inc. has a new US$10 million in ven- 
ture funding. "We've always been prof- 
itable and cash-flow positive," 
Fleury said. "So people say, 
'Why did you need more mon- 
ey?' It's strategic." 

Sure, JBoss needed the 
money to step up its marketing 
efforts. It needed the money to 
entice people to work on JBoss' 
open-source projects, with the 
dangled carrot of employment 
and — dare I say it? — stock in the com- 
pany! But most important, JBoss need- 
ed a pile of cash in its corporate coffers 
to send a clear signal of viability to the 
market. "Knowing that we are finan- 
cially viable mitigates their risk," 
Fleury said of potential customers. 

Apparently, there's little risk in the 
JBoss technology. Its popularity among 
Java users is on the rise, with 26.9 per- 
cent of people responding to a 2003 
survey by this newspaper's sister orga- 
nization, BZ Research, saying they 
have adopted the app server. Fleury 
said this made securing the funding all 
the more easy. 

The lead investor in the round was 
Matrix Ventures, where David Skok, 
founder of the former SilverStream 
Software, now hangs his hat. "The one 
[venture capital firm] that knew the 
most about the field felt the strongest 
about the deal," Fleury boasted. 



investment opportunities in the late 
1990s, when companies were able to 
secure millions in funding. Who could 
forget the initial stock offering of 
VA Linux Systems Inc., which gained 
697 percent on the first day its stock 
traded — opening at US$30 per share 
and closing at $239.50. And Fleury 
thinks that based on his company's ven- 
ture round, in which he said eight com- 
panies were vying to invest, open 
source will become a hot investment 
once again. 

But just how open source is open 
source, when a company controls its 
code and locks it down? Is JBoss turn- 
ing its back on the open-source com- 
munity when it claims it will own 80 
percent of its code and will swallow up 
the developers contributing the most 
serious work to JBoss projects? 

"That's the basis of second-genera- 
tion open-source companies," Fleury 
said. "MySQL owns 100 percent of the 
intellectual property. We own 80 per- 
cent. We control the quality of that code. 
It's not ponytail open source. It's a more 
mature, refined business model." 

The line between open-source and 
proprietary software is being blurred 
by these "next-generation" open- 
source companies. They claim to be 
redefining what open source means, 
but instead they are moving further 
away from the spirit of the open-source 
community, which was to create soft- 
ware that could be shared, improved 
and given back to all — without any fees 
or restrictions at all. No code lock- 
downs. No maintenance charges. No 
ownership. No profit. 

To me, if a company owns its code, 
controls changes to it, and employs the 
engineers working on the codebase, it's a 
company, not a community. I 



Open source was the hottest of hot David Rubinstein is editor of SD Times. 
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Internet-based applications such as e-commerce, Web site manage- 
ment and traffic analysis and reporting are most likely to be out- 
sourced. That's according to Applications Management and Out- 
sourcing Services, a survey of 315 IT professionals conducted by 
research firm Meta Group Inc. earlier this year. 

The study also showed that more traditional, non-Internet-based 
applications are the least likely to be developed and maintained by 
an outside firm. Such applications include business intelligence, data 
warehousing, CRM and ERP. The survey also showed that companies 
in Europe, Africa and the Middle East, in general, were more likely to 
outsource application services than those in North America. 

The study attributes the propensity to outsource Web applica- 
tions to a number of factors: 1) that Web technologies came into 
prominence along with service providers for their creation, hosting 
and management, 2) that Web sites are well suited to being managed 
from the outside, and 3) that executives associate no negative con- 
notation with contracting outside support for their Web systems. 

Source: Applications Management and Outsourcing Services, Meta Group Inc. 

www.metagroup.com 



The board of directors of TIBC0 Software Inc. has 

instituted a stockholder rights plan— often called a 
"poison pill" as it is designed to fend off unwanted 
takeovers — that involves issuing a dividend of one 
right for each share of its common stock. The right 
will entitle shareholders of record as of March 5 to 
purchase a fractional share of preferred stock if a 
person or group acquires, or announces a tender 
offer that would result in the acquisition of, 15 per- 
cent or more of TIBCO's common stock. The compa- 
ny said it knows of no attempts to take it over 
. . . Topping the billion-dollar mark in revenues for 
the first time in one fiscal year, BEA Systems Inc. 
reported fiscal 2004 revenues of US$1,012 billion, an 
8 percent increase over fiscal 2003. For fiscal 2004, 
BEA reported net income of US$118.7 million, a 41 
percent increase over the prior year . . . Novell Inc. 
announced first-quarter 2004 revenue of US$267 
million, compared with $260 million for the same 
period a year ago. Net income for the first quarter 
was $10 million, compared with a net loss of $12 mil- 
lion for the same period last year . . . Versant 
Corp. reported revenues of US$6.4 million and a net 
profit of $605,000 for the first quarter ended Jan. 
31. The company said its results were the best they 
have been in three years. I 
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BrainShare 

Salt Lake City 

NOVELL INC. 

www.novell.com/brainshare 



March 21-26 



VSLive March 23-27 

San Francisco 

FAWCETTE TECHNICAL PUBLICATIONS INC. 

www.ftponline.com/conferences 

r vslive/2004/sf 

PyCon March 24-26 

(Python Conference) 

Washington, D.C. 

PYTHON SOFTWARE FOUNDATION 

www.python.org/pycon/dc2004 

Gartner March 28-April 1 

Symposium/ITxpo 

San Diego 
GARTNER INC. 

www.gartner.com/2_events/symposium 
/worldwide.html 

electronicaUSA/ March 29-April 1 
Embedded Systems Conference 

San Francisco 

CMP MEDIA LLC 

www.esconline.com/electronicaUSA 

MySQL Users April 14-16 

Conference & Expo 

Orlando, Fla. 

MYSQL AB 

www.mysgl.com/events/uc2004/index.html 

Visual Studio April 18-21 

Connections 

Orlando, Fla. 

DEVC0NNECTI0NS 

www.vsconnections.com/vs 

For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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MANAGE • DEBUG • TEST • DELIVER! 




_ affordabte and feature-rich application testing, profiling, debugi 

and project management tools have been engineered from the ground up to deliver 

robust and unparalleled support for Windows® applications and are one of the first 

products of their kind with full .NET Framework support out of the box. Once you start 

using our tools, you are well on your way to building rock solid applications, in the 

shortest possible time, guaranteed! 
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(aOi Bottlenecks? 

Wart to lirorove the Perfornancc- of Your 

Applications? 
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With TestComplete, 
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Each and Every Time! 
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"uncMnnnl wril and rpurcsssi^ testing In nnc fsnj.y to UW iiral Icpt^lly i^jrafed packap. 
Testrr^plnic brtngps tpsting out of ttip Dqrk ftcei hv "Tiering nn ittcniable mf in Rfkldl in daliYET 
invalid ^R? predKitable applic?4lpni- on tlm...HciT find ipver^ limn 1 
Hfliglh&r ym buNd Window^ pr W-nb WptiafkTO nnx vn,. sluri using TaslCnRipksIa yen" I h& 
jtafi in In - " Ck'crn iBtfl run -nh 3 key ciyrrhni.nn lo your pufsngll jJavEsppmsnt dlprte. 
TcsGamplElc *iil kaiip your prppete pn edttdult and an sper. Ibts mm canfifcrri and Ihr: i*wk 
TOO* prnductin. 
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2200 E Patrick Lane Suite 
Lbs Vegas NV 39119 
Tel: (702} 8919424 




TestComplete and our complete range 
of Quality Assurance toots, 

us online at www.automnteiiqa.com 



Microsoft, Wtnttowsanti vtsoal Studio AFT are 

either registered trademarks or trademarks of Microsoft Corporation in the United States antf/cr other countries. 




in the beginning 
there has COM... 



yaal*rtf;a> 



Microsoft IntitKtUMS Dm .NET 
FtaiMWDfkwd sUmuttBiwDUGly 

■iMo|pSllUfr SniHUtfKH tlHlr 

JNET mdmap and ship data 
tor NstAdvarvtagjiV 



inrrfagPaucs- nMOS&es on 
ASftWEl 'Btpftnsa* nBtemnM 
Appfcstkn -Hid tJw Windows 
Forma liMhaf* whn n w 
appticfltton and tfiook. 




Vrali trvn teaturfrpacfcac 
ntnsfls pw yHF H Inft^jtaBcs 
NirtAdvHrtB^pfmttlGlnthfl 
iMmtB prawnbttan Iqpr 
tataatfcr Windows Pwms, 
AfiRNET, Tablet PC and OOM. 
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intagjAliH Is invftAd 

by Microsoh to 
6mwa/nam nm- 
AakndAAtapftf 

tMltatPDCL 
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Infragistics™ NetAdvantage™ 2004 Vol. 1 

The ultimate presentation layer toolset for building commercial class 
user interfaces for Windows Forms, ASRNET, Tablet PC and COM 



NfltAdvHFrtHge with SutHCffption and Priority Support ($995). h* udcs ejM 
Window Funis, ASP.NET, Tablet PC & COIY filctfitmts; updates-, upgrades unG 
new orod Jul T clcascs Tor one ! P tar, Tu I C$ sdu^ju uode J or N-ET f jqoIs and 
designer*, pi as frno yctf^ or PriOriiy D ho-iu and Pul; d PuspOr^ss Online sjppuri 

NotAdvaFitiigo with Subset IjrtlQfi Service [S6951- Includes ul Win«*fi Forms, 
A5P.NET; Tablet PC ^ COM Dlerruri3; -pdalcs. upgrades ard new product 
releases for o"o your, full C# source code fdr ,NE~ tools and designee. 

NetAdvantnEfe [product -only 54951. I^Ilcuh nil Windows ForrfiS, A5PAET, Tabled 
PC 4 COM cfromohls. 

NG'^dvan^go sh-pia with over 1MJ lec - "n*a r Faou ola~cn"s incl -ding Grids, 
Tool Bars, BeplororiJani. Trims. KehYlIS. ListBars, Tab&. Dockable Windows, 
NuvigaVon, Schccul ngand Calendaring, Charting- Dala InuUL Editors, and mo-u! 

VWt iu at booth 719 at USLkvul In San Fruicl»a 

Dcweri-Hd m froc fill foalurod trial nnlon inf ra^litln.frPm/dowTiloari 



Windows harms 

Wi-Dr d* ht l *\ r^uvurte ami Enhflneanwms 
Wi Too burs' NEW Failures urid Er:h&rtfW*ril& 
Wi-ljfjIurerBar Ouitook 2003 Nnvlg^tl&ri Pdffco 
WI^SChiMJute ■ OffrCc 2003 LMk £ Fed 
WUWwt- NEW StepUrw etert typa 
Wi ■ Editors* NEW Fcoturfes and Entomeomfrhtfi 



A&PAFT 

ASP NET PrteeniEiioon buyer Frumuwh NEW Features and Enft&noamante 

WubDulalnsiJt 5 NEW elements including WebMoskEtfll 

WubGrto T NEW Fcsnu*w and EnhsncamMvtfi 

Wob Menu a MEW ^daturas, rj^d Bmhanurnenlfi 

WcbCharl NFW StHpUfta chart tyfta 

WDbT'DH A N EW Fouures and En^ur-:c - «.i i r .:- 



* NOW Sottion 50B :Q-pl ami 



Infragistics 

lirfr^glffilcfli rlBadquartnEi AM 231 85SS 
livfnigfrtics Ejj^pb 444 600 298 9055 

IntraiJfestlcs.ca-m 



